GDPR Compliance

Lawful basis

Plannetic processes data to deliver contracted services to regulated firms and to meet legal and regulatory obligations. We use legitimate interests for platform security and service improvement.

Data subject rights

• Right to access your personal data.
• Right to rectification or erasure where applicable.
• Right to restriction or objection to processing.
• Right to data portability for supported exports.

Security controls

We maintain encryption in transit and at rest, role-based access controls, immutable audit trails, and UK data residency to safeguard client data. Subprocessors are vetted and contractually required to meet GDPR obligations.

DPA and subprocessors

A Data Processing Agreement is available for regulated firms. We maintain a current list of subprocessors and notify firms of any material changes.

Contact

For GDPR requests, contact our privacy team at privacy@plannetic.com.