Privacy notice
Last updated: 18 October 2026
This notice explains what personal information Plotted Home collects, why, how long we keep it, and your rights. We’ve kept it short and in plain English.
Who we are
Plotted Home is run by Mouhcine Daali, a sole trader based in Morocco. For the information described here, we are the “controller”, which means we decide how it is used.
Contact: daalim377@gmail.com
We sell through Gumroad, which is the merchant of record. Gumroad takes your payment, charges VAT and keeps its own records of the sale.
What we collect
If you buy the DIY research guide (£7)
- Gumroad passes us your name and email address. We don’t receive your card or payment details.
- We use them only to deliver your guide and to answer you if you contact us.
- We don’t send you marketing emails.
If you order a personalised house history (from about 17 November 2026)
- your name and email address (through Gumroad)
- the address and postcode of the house, which we need to research it (we can’t make the report without them)
- if it’s a gift, the recipient’s name and, if you choose, a gift message
- if you choose, anything you already know about the house. Please don’t include health or other sensitive details about anyone.
- if you choose, a photo of the house that you upload or email
When you email us, we receive your email address and whatever you write.
On our website, we don’t use cookies or analytics and we don’t collect personal information. Our web host processes technical connection data, such as IP addresses, to deliver and protect the site. Gumroad’s checkout pages have their own cookies and privacy policy.
Why we use it, and our lawful basis
- To make, deliver and support what you bought. Our lawful basis is contract (UK GDPR Article 6(1)(b)): we need this information to supply your order.
- Gift recipients. We use a recipient’s name and the gift message only to personalise and deliver the gift you asked for. Our lawful basis is our legitimate interest in providing the gift service you requested (Article 6(1)(f)).
- Keeping accounts. We keep basic sales records because tax and accounting law requires it (legal obligation, Article 6(1)(c)).
We don’t sell your information. We don’t use it for advertising, profiling or automated decisions.
Your photo
If you upload or email a photo, we use it only in your report. We may crop it, or blur any faces or number plates in it. The rules for photos are in our terms.
Who handles it for us
We use a small number of service providers (“processors”) who handle information only on our instructions:
- Gumroad, Inc. (USA): checkout, payment, VAT and file delivery. For your order details, Gumroad acts for us under its Data Processing Addendum. For payment, tax and fraud prevention, Gumroad is a separate controller under its own privacy policy.
- Google (Gmail and Google Drive): our email and the storage of order files while we work on them.
International transfers
We work from Morocco, so your information is handled there, and also by Gumroad and Google, which may store it in the USA and elsewhere.
To be open about it: the UK has not recognised Morocco as giving “adequate” protection for personal data, so UK law doesn’t guarantee the same protection there as in the UK. We reduce the risk by:
- collecting only what we need for your order
- keeping it only in our password-protected Gumroad and Google accounts
- deleting it soon after delivery (see below)
Gumroad covers its handling with the UK International Data Transfer Addendum to the standard contractual clauses. Google uses its own data processing terms and transfer safeguards.
How long we keep it
- Order details, house address, gift details, notes and photos: deleted 90 days after we deliver your report. That gives time for any corrections you ask for.
- Guide orders and emails to us: deleted 90 days after your order or your last message, whichever is later.
- Sales records (name, email, what you bought, price and date): kept only as long as tax and accounting law requires. Gumroad also keeps its own transaction records under its own policy.
Your rights
Under UK data protection law (the UK GDPR), you can ask us to:
- give you a copy of your information
- correct it
- delete it
- restrict how we use it, or object to it
- send it to you or another organisation in a portable format
Email daalim377@gmail.com and we’ll reply within one month. It’s free.
If you’re a gift recipient: the person who ordered the gift gave us your name, and perhaps a message. We use them only to make the report and delete them 90 days after delivery. These rights apply to you too.
Complaints
Please tell us first, and we’ll try to put things right. You also have the right to complain to:
- the UK Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, phone 0303 123 1113
- Morocco’s data protection authority, the CNDP: cndp.ma
Changes
If we change this notice, we’ll update it here and change the date at the top.