Last updated: 7 October 2026
Who is responsible for your information?
PluginPip Ltd is the controller responsible for the personal information described in this notice when it decides how and why that information is used.
PluginPip Ltd is registered with the Information Commissioner's Office (ICO), registration reference ZC240366.
Privacy enquiries can be sent to hello@pluginpip.co.uk.
44 Jubilee Way,Todmorden,
West Yorkshire,
OL14 7EX
Where this notice applies
This notice applies to pluginpip.co.uk, pluginpip.store, PluginPip Store accounts, purchases, customer support, software licensing through PipKey, PluginPip Search Intelligence (PipGSC) and other PluginPip services where this notice is linked or referenced.
Information we may collect
- Your name, email address, business or organisation name and other contact details you provide.
- Store account information, such as account identifiers, password hashes, session and security records and verification status. PluginPip does not store your plain-text account password.
- Order information such as products, prices, currency, order status, invoice or transaction references and the terms or consent version accepted at checkout.
- Payment status and provider references needed to reconcile a purchase. Raw card numbers and card security codes are handled by the payment provider and are not stored by PluginPip.
- Software licence and entitlement information, including product, plan, licence status, activation allowance, installation identifiers, activation history and privacy-minimised technical information needed to validate or support licensed software.
- Support correspondence, request identifiers and diagnostic information you choose to provide.
- Security and service-operation information such as request identifiers, timestamps, route/status information, audit events and limited technical logs.
- Analytics information where you have chosen to allow optional analytics on pluginpip.co.uk.
- For PluginPip Search Intelligence (PipGSC), Google account identity needed to distinguish a connection, the Search Console properties available to that account, Search Console performance data, URL Inspection results and related sync or diagnostic records. Google refresh tokens used to maintain an authorised connection are stored in protected encrypted form.
Why we use personal information
We use personal information to respond to enquiries, create and secure Store accounts, process and reconcile orders, deliver digital products, issue and administer licences, provide updates and support, prevent abuse and fraud, maintain service security and availability, keep appropriate business and accounting records and comply with legal obligations.
Lawful bases
Depending on the activity, processing may be necessary to take steps at your request before entering into a contract, to perform a contract, to comply with a legal obligation, or for legitimate interests such as securing accounts and services, preventing misuse, maintaining audit records and managing customer relationships where those interests are not overridden by your rights.
Where optional analytics requires consent, PluginPip uses analytics only after you have made that choice. You can change the choice through the Cookie Policy controls.
Payments
Store payment entry is provided by the configured payment provider, currently Revolut for PluginPip Store. PluginPip receives only the information needed to identify, reconcile and support an order, such as provider order or payment references, amount, currency and payment status. PluginPip does not intentionally receive or store raw cardholder data.
Software licensing and delivery
PipKey manages licensing, activations, entitlement status and signed software-delivery information for supported PluginPip products. Licensing is designed to minimise collected information and does not require page content, customer orders from your own website, passwords or payment-card details.
Google API data and PluginPip Search Intelligence (PipGSC)
PipGSC connects to Google only after an authorised user completes Google OAuth. The current read-only service requests basic Google account identity scopes and the Google Search Console read-only scope. It does not request access to Gmail, Google Drive, Google Calendar or unrelated Google services.
Google Search Console data is used to provide the search-intelligence features requested by the connected user, including property discovery, search-performance reporting, ranking-change analysis, content-decay and cannibalisation analysis, retained settled-day history and URL Inspection diagnostics. PluginPip does not sell Google user data, use it for advertising or use it to train general-purpose AI models.
PipGSC stores Google OAuth refresh tokens in protected encrypted form and keeps them server-side. Search Console data may be retained in PluginPip-controlled data stores so that historical comparisons and monitoring can be provided without repeatedly re-fetching the same settled data. Access is limited to authorised PluginPip systems and personnel who need it to operate or support the service.
When you intentionally use an authorised connected tool or MCP client to query PipGSC, the specific results necessary to answer your request may be returned to that client. The connected client provider may process that returned information under its own terms and privacy notice. PluginPip does not disclose Google user data to unrelated third parties for their own advertising or marketing purposes.
You can revoke PluginPip Search Intelligence access through your Google Account at any time. You can also contact PluginPip to disconnect a Google account and request deletion of associated stored connection data, subject to any information PluginPip must retain by law. PipGSC's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Sharing information
Information is shared only where reasonably necessary with service providers used to operate PluginPip, such as hosting and infrastructure providers, payment providers, email and support providers, source/development providers or other suppliers supporting an agreed service. PluginPip Ltd does not sell personal information.
How long we keep information
PluginPip keeps information only for as long as reasonably necessary for the purpose for which it was collected and any applicable legal, accounting, security, contractual or dispute-resolution requirement. Financial and transaction records may need to be retained for statutory accounting periods. Operational logs and detailed licensing or support records are kept only for the approved period applicable to their purpose. Historical backups expire according to the controlled backup-retention schedule.
International processing
Some suppliers may process personal information outside the United Kingdom. Where PluginPip Ltd makes or is responsible for a restricted international transfer, it uses an applicable UK adequacy regulation, approved transfer safeguard or another lawful transfer provision as required.
Security
PluginPip uses technical and organisational safeguards including access control, protected credentials, encryption where appropriate, security logging, controlled production changes, backups, restore verification and incident procedures. No internet service can be guaranteed to be completely risk-free.
Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to the use of your personal information, and rights relating to portability and certain automated decisions. Some rights are subject to legal conditions and exemptions.
Right to object
Where PluginPip Ltd relies on legitimate interests, you have the right to object in certain circumstances. Contact PluginPip using the details in this notice and the objection will be considered in accordance with applicable data protection law.
Data protection requests and complaints
To make a data protection request or raise a concern, contact hello@pluginpip.co.uk. PluginPip may need to verify your identity before disclosing or changing personal information. You also have the right to raise a concern with the UK Information Commissioner’s Office.
Changes to this notice
This notice is reviewed when PluginPip changes its products, suppliers or personal-data processing. Material changes will be reflected in the date shown above and, where appropriate, communicated through the relevant service.