Privacy notice
Last updated 21 October 2026
We collect as little personal data as we can, we never sell it, and you can download or delete your account data at any time from your account page.
This notice explains how PlasticFreeHome ("we", "us") handles personal data under the UK GDPR and the Data Protection Act 2018. PlasticFreeHome is a trading name of Anwar Enterprises Ltd (company number 13949086), registered office Shirley Social Club, Marshall Lake Road, Shirley, Solihull, B90 4RB, which is the data controller. Contact us about privacy at the address on our contact page.
What we collect and why
| Data | When | Why (lawful basis) | Kept for |
|---|---|---|---|
| Email, name, password (hashed) | You create an account | To provide your account (contract) | Until you delete your account |
| Audit answers and swap plans | You save a plan | To provide the service (contract) | Until you delete them or your account |
| Membership status and Stripe customer ID | You join PFH Plus | To take payment and provide membership (contract); tax records (legal obligation) | 6 years after membership ends, for tax records |
| Email address and consent record | You join the newsletter | To send the newsletter (consent) | Until you unsubscribe, then a suppression record |
| Name, email, organisation, message | You contact us, apply for PFH Checked or submit a right of reply | To respond (legitimate interests) | 3 years, or longer if part of a published record |
| Research votes and member questions | You vote or ask a question | To run member features (contract) | Until you delete your account |
| Link clicks (no personal data) | You click a shop link | To see which pages help readers (legitimate interests) | 24 months |
| Pages visited, device and approximate location (Google Analytics) | You allow analytics cookies | To understand which pages help readers (consent) | 2 months (Google Analytics default) |
| A one-way hash of your IP address | You submit a form or sign in | To stop spam and password guessing (legitimate interests) | Deleted within 24 hours |
We do not collect card details: payments are handled by Stripe. We do not use advertising trackers, and we have not switched on Google Analytics advertising features.
Cookies
We use one essential cookie to keep you signed in. We count visits with Vercel Web Analytics, which uses no cookies and does not identify you. If you allow it, Google Analytics also sets cookies to help us understand how the site is used. See our cookie policy.
Who we share data with
- Stripe — payment processing for PFH Plus.
- Resend — to send account, form and newsletter emails.
- Vercel and Neon — hosting, visit counting (no cookies) and our database.
- Google — Google Analytics, only if you allow analytics cookies.
Each acts on our instructions under a data processing agreement. Some are based outside the UK; where they are, transfers are covered by UK adequacy regulations or the International Data Transfer Agreement.
Your rights
You can ask us to access, correct, delete, restrict or transfer your data, or object to how we use it. You can download a copy of your account data and delete your account yourself on your account page. We reply to requests within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put it right first.
Changes
We will update this notice when our practices change and show the date at the top.