Privacy Policy

This Privacy Policy explains how Ploya Ltd (“Ploya”, “we”, “us”) collects, uses, stores and shares personal data when you use our Service, website, mobile apps and when we otherwise interact with you. It applies to Buyers, Providers, Enterprise users, job applicants, partners and visitors. Effective date: 20 August 2026.

Ploya Ltd (Company No. 15469051) is the data controller for personal data collected via the Service. Contact: policy@ploya.co, 167–169 Great Portland Street, 5th Floor, London, W1W 5PF.

Account & identity data: name, email, phone, date of birth, address, government ID (for verification), profile photos, trade licences, professional credentials.

Transaction data: booking details, invoices, payment method (last 4 digits), escrow records, pricing, materials orders. (Payment card details are processed by third-party payment processors and not stored by Ploya except where required and with consent.)

Verification & background data: background checks, license checks, insurance certificates.

Communications: messages between users, support interactions, call recordings (if any) with consent.

Device & usage data: IP address, device identifiers, operating system, browser, cookies, analytics, location (if enabled).

Financial & credit data: BNPL / credit checks, transaction history, underwriting data (may include credit references and income information).

Sensitive data: limited sensitive data may be processed for verification (e.g., criminal record checks). We will only process sensitive data where lawful (e.g., with consent or legal obligation).

Public & business data: company name, VAT/registration numbers, enterprise contact info.

We process personal data for the following purposes and legal bases:

To provide and operate the Service (performance of contract).

Verification, fraud prevention and compliance with legal obligations (legal obligation & legitimate interests).

Payments, escrow, billing and financing decisions (performance of contract & legitimate interests).

Communication, dispute resolution and customer support (performance of contract & legitimate interests).

Marketing and service updates (consent for direct marketing where required; otherwise legitimate interests with opt-out).

Analytics, product improvement and research (legitimate interests).

Legal claims, regulatory reporting and safety (legal obligation).

Employment recruitment (consent, contract, or legal obligation as applicable).

We may share personal data with:

Payment processors, financial partners, BNPL and cash-advance underwriters.

Insurance providers and brokers for policy issuance and claims.

Background check and verification providers.

Enterprise clients and Buyers/Providers as necessary for delivery of services.

Service providers: hosting, analytics, email, CRM, legal and accounting.

Law enforcement, courts or regulators where required.

In the event of a corporate transaction (sale, merger), subject to confidentiality and notice.

Ploya operates internationally. Data may be transferred outside the UK/EEA (for example, to the US). Where data is transferred, we use appropriate safeguards (Standard Contractual Clauses, adequacy decisions) and/or ensure legal basis for transfer.

We retain personal data as long as necessary for the purposes set out (account lifecycle, transactional records, legal obligations). Typical retention periods: account data while account is active + 7 years for financial records (or as required by law). Specific retention periods available on request.

Depending on jurisdiction, you may have rights including: access, correction, deletion, restriction, objection, data portability, withdrawal of consent, and lodging a complaint with a supervisory authority. Requests can be made via policy@ploya.co. We will verify identity before responding.

We implement technical and organisational measures to protect data (encryption in transit, access controls, monitoring). No system is perfect — report suspected breaches immediately to help@ploya.co. We will notify affected individuals and authorities where legally required.

We use cookies and similar technologies for essential operations, analytics and marketing. You can manage cookie preferences via our cookie banner and browser settings. Third-party analytics and ad providers may collect data — see list of third parties in the cookie settings.

The Service is not directed to children under 18. We do not knowingly collect data from children under 18. If you believe we have, contact us to remove the data.

We may update this Privacy Policy. For material changes we will provide notice. Continued use after changes indicates acceptance.

Data protection contact: policy@ploya.co

Postal: Ploya Ltd, 167–169 Great Portland Street, 5th Floor, London, W1W 5PF

If you are in the UK/EEA you can lodge a complaint with the Information Commissioner’s Office (ICO) or your local supervisory authority.