Privacy Policy

Pluto Agency, Inc. ("Pluto," "we," "our," or "us") respects your privacy. This policy explains what we collect when you visit pluto.agency or engage us as a client, how we use it, and the choices you have.

1. Who we are

Pluto Agency, Inc. is a Delaware C-corp headquartered at 2040 Valencia Street, Studio 4, San Francisco, CA 94110. For any privacy-related request, email privacy@pluto.agency.

2. Information we collect

• Enquiry data — your name, email, company, role, budget range and message when you complete our contact form.
• Client data — information you share with us under a signed engagement (business data, creative assets, measurement access).
• Technical data — IP address, device/browser type, referrer, and page analytics gathered via first-party tools.
• Cookies — essential cookies for the site to function and, with your consent, analytics cookies.

3. How we use your information

• To respond to enquiries and provide the services you engage us for.
• To improve our website, content and client experience.
• To meet legal, tax and contractual obligations.
• To send operational emails. We do not send unsolicited marketing email.

4. Legal basis (GDPR / UK GDPR)

Where applicable, we process personal data on the basis of (a) your consent, (b) performance of a contract with you, (c) compliance with a legal obligation, or (d) our legitimate interests in operating a transparent professional services business.

5. Sharing

We do not sell personal data. We share data only with vetted subprocessors that help us operate (hosting, analytics, email, CRM, payments) and with professional advisors. Current subprocessors are listed at privacy@pluto.agency on request.

6. Retention

Enquiry data is retained for 24 months unless you become a client, in which case it is kept for the duration of the engagement plus seven years for tax and legal reasons.

7. Your rights

• Access, correct, export, or delete your personal data.
• Withdraw consent at any time where processing is based on consent.
• Object to processing based on our legitimate interests.
• Lodge a complaint with your data protection authority.

To exercise any right, email privacy@pluto.agency. We respond within 30 days.

8. California residents (CCPA / CPRA)

California residents may request disclosure and deletion of their personal information and may opt out of any "sale" or "sharing" of personal information. Pluto does not sell personal information.

9. Security

We use industry-standard safeguards — encryption in transit, least-privilege access, vendor review and an incident-response plan. No system is perfectly secure, and we commit to transparent communication in the unlikely event of an incident.

10. Changes

We will update this policy when our practices change. Material changes will be signalled on this page and, where appropriate, by email to active clients.