GDPR Compliance
Your privacy and data protection are our top priorities
Our Commitment to GDPR
PlotsAlot is fully GDPR compliant. We are committed to protecting the personal data of all individuals in the European Union, United Kingdom, and other regions covered by the GDPR. Our policies and practices ensure full compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Your Data Rights
As a data subject, you have specific rights under GDPR. You can access your personal data, request corrections to inaccurate information, request deletion of your data (right to be forgotten), request data portability, restrict processing, and object to certain processing activities. To exercise any of these rights, please contact us at support@slashml.com.
Data Processing
We transparently process personal data only for specified, explicit, and legitimate purposes. We use appropriate technical and organizational measures to ensure the security of your data. We maintain data for only as long as necessary to fulfill the purposes for which it was collected.
Our Role in Data Processing
PlotsAlot primarily acts as a data processor on behalf of our customers, who serve as controllers. This means our customers determine what personal data is shared with us. When we collect data directly from visitors to our website, we act as a controller. In certain cases where we aggregate data for analytics purposes, we may act as both processor and controller.
Data Subject Rights Under GDPR
Right to Access
You have the right to obtain confirmation as to whether your personal data is being processed, and to view the personal data we hold about you.
Right to Correction
You can request correction of inaccurate or incomplete personal data held about you.
Right to Erasure
You can request deletion of your personal data under certain circumstances (right to be forgotten).
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another processor.
Right to Restrict Processing
You can request restriction of processing of your personal data in specific situations.
Right to Object
You have the right to object to certain processing activities, including processing for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on your consent, you can withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing before the withdrawal.
Sub-processors
PlotsAlot uses trusted third-party sub-processors to provide our services. All sub-processors are subject to GDPR-compliant data processing agreements (DPA) that ensure your personal data is protected with the same standards we maintain.
Our sub-processors include cloud infrastructure providers, payment processors, email services, analytics providers, and customer support tools. Each sub-processor is carefully selected and vetted for their commitment to data protection and privacy.
View our Sub-processorsHow to Exercise Your Rights
To exercise any of your rights under GDPR, please contact us with a clear description of your request:
Email: support@slashml.com
Subject: GDPR Data Subject Rights Request
Response Time: We aim to respond to all requests within 30 days, as required by law.
Identification: We may need to verify your identity to process your request.
Data Processed on Behalf of Our Customers
If your personal data has been processed through PlotsAlot on behalf of one of our customers, that customer is the data controller. We recommend contacting them directly to exercise your rights. If you contact us, please specify the customer, and we will forward your request to them and support their response in compliance with GDPR requirements.
Data Security and Retention
We implement comprehensive technical and organizational security measures to protect personal data against unauthorized processing, accidental loss, destruction or damage. These measures include:
- Encryption of data in transit and at rest
- Access controls and authentication mechanisms
- Regular security assessments and penetration testing
- Secure deletion procedures
- Incident response and notification procedures
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods vary depending on the nature of the data and the purpose of processing.
Right to Lodge a Complaint
If you believe we have violated your privacy rights or GDPR requirements, you have the right to lodge a complaint with your local data protection authority or supervisory authority. We encourage you to first contact us to resolve any concerns.
For more information about how we collect, use, and protect your data, please review our Privacy Policy.
For any questions or concerns about GDPR compliance, please contact us at support@slashml.com
Last updated: December 25, 2025