This page explains the rights you have over your personal data and how to use them. It is free, and we will not ask why you want to do it.
Most things you can do yourself in the app, immediately, without contacting us. Those are listed first.
1. Things you can do right now in the app
| What you want | Where to go |
|---|---|
| Delete a single selfie | Progress, select the photo, Delete |
| Delete all your selfies | Settings, Privacy, Delete all photos |
| Turn off skin analysis | Settings, Privacy, Skin analysis |
| Edit your skin profile | Profile, Edit |
| Turn off marketing emails | Settings, Notifications, or the unsubscribe link in any email |
| Turn off push notifications | Settings, Notifications, or your device settings |
| Change cookie and analytics choices | Settings, Privacy, Cookie settings |
| Download your data | Settings, Privacy, Export my data |
| Delete your account and everything in it | Settings, Account, Delete account |
Account deletion removes your photos, skin analysis results, profile, routines and saved products. It is permanent. Data is removed from our active systems immediately and from encrypted backups within 30 days.
2. Your rights in full
Right of access
Ask for confirmation that we hold data about you, a copy of it, and information about how we use it.
Right to rectification
Ask us to correct data that is inaccurate, and to complete data that is incomplete.
Right to erasure
Ask us to delete your data. This applies in particular where you withdraw consent, where the data is no longer needed, or where we have processed it unlawfully. We may keep limited records where the law requires it or where we need them to defend a legal claim, and we will tell you if that applies.
Right to restriction
Ask us to stop using your data while we check its accuracy, or while we consider an objection you have raised.
Right to data portability
Ask for the data you gave us, and the data we generated from it with your consent, in a structured, commonly used, machine readable format. You can ask us to transmit it to another provider where that is technically feasible.
Right to object
Object to any processing we carry out on the basis of legitimate interests. Object to direct marketing at any time, for any reason or none, and we must stop.
Right to withdraw consent
Withdraw any consent at any time, as easily as you gave it. This includes consent to skin analysis, to marketing, and to analytics cookies.
Rights around automated decision making
Be told when a decision about you is automated, obtain human intervention, express your point of view, and contest the result. See the AI Transparency Notice.
Right to complain
Complain to us, and to a supervisory authority. See section 5 and section 6.
3. Making a request
Email operations@plumped.co.uk with:
- the email address on your Plumped account;
- what you want us to do;
- if you are asking for a copy of your data, whether you want everything or only a specific period or category. This is optional and it usually makes the answer faster and more useful.
You can also write to us at PLUMPED LTD, 124 City Road, London, England, EC1V 2NX.
What happens next
| Step | Timing |
|---|---|
| We acknowledge your request | Within 3 working days |
| We verify your identity | We will normally verify by sending a confirmation link to the email address on your account. If we cannot, we may ask for more information |
| We respond in full | Within one calendar month of receiving a valid request |
If your request is complex, or if you have made several requests, we may extend the deadline by up to two further months. We will tell you within the first month if we do, and explain why.
If we need more information from you to understand or scope your request, the clock pauses until you reply.
We search for your data in a way that is reasonable and proportionate. If we cannot find something you believe we hold, tell us where you think it is and we will look again.
If we refuse
We may refuse a request that is manifestly unfounded or excessive, or where an exemption in the Data Protection Act 2018 applies. If we refuse, we will tell you why, tell you that you can complain to us and to the supervisory authority, and tell you that you can seek a judicial remedy.
We do not charge a fee for a request. If a request is manifestly unfounded or excessive, we may charge a reasonable administrative fee or refuse, and we will explain our reasoning.
4. On behalf of someone else
If you are making a request for another person, send us written authority from them. If you are a parent or guardian of a user aged 16 or 17, we will consider the request taking into account the young person's own views and their right to privacy, which may mean we ask them directly.
5. Complaining to us
You have the right to complain to us about how we handle your personal data.
By email: operations@plumped.co.uk with "Data protection complaint" in the subject line.
By post: Data Protection Complaint, PLUMPED LTD, 124 City Road, London, England, EC1V 2NX.
In the app: Settings, Privacy, Make a complaint.
Tell us what happened, when, and what you would like us to do about it.
| Step | Timing |
|---|---|
| We acknowledge your complaint | Within 3 working days |
| We investigate and tell you the outcome | Within 30 days |
| If we need longer | We will tell you before the 30 days are up, explain why, and give a revised date |
We will tell you what we found, what we have done, and what you can do if you are still not satisfied. We keep a record of every complaint and review them for patterns.
6. Complaining to a regulator
You can complain to a supervisory authority at any time. You do not have to come to us first, although it often resolves things faster.
United Kingdom Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Telephone: 0303 123 1113 Website: ico.org.uk
European Economic Area The data protection authority in the country where you live, where you work, or where you believe the problem occurred. Contact details for every authority are published by the European Data Protection Board at edpb.europa.eu.
Elsewhere If you are in the United States, see the US Privacy Notice for state specific routes.
You also have the right to an effective judicial remedy against us or against a supervisory authority.
7. Contact
| Purpose | Contact |
|---|---|
| Data requests and complaints | operations@plumped.co.uk |
| General support | contact@plumped.co.uk |
| Post | PLUMPED LTD, 124 City Road, London, England, EC1V 2NX |