Privacy Policy

Last updated: 3 May 2026

1. Who we are

Pension Plain (pensionplain.co.uk) is published by VitaVerse LLC, a Wyoming-registered company. For data protection purposes we are the “data controller” — the organisation that decides what personal information we collect and how we use it.

Contact:

• VitaVerse LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA
• Email: info@pensionplain.co.uk
• Use the subject line Privacy for anything covered by this policy

We don’t have a separate Data Protection Officer — for the volume of data we handle, UK GDPR doesn’t require us to appoint one. Privacy enquiries go to the address above.

2. What information we collect

We collect only what’s necessary to run the site and provide what you’ve asked for. Specifically:

You give us when you subscribe to the newsletter:

• Your email address (required)
• The date and time you subscribed
• Whether you confirmed your subscription via the double opt-in email

You give us when you contact us:

• Whatever information you put in your email or message

We collect automatically when you visit the site:

• Standard web server logs: IP address, the page you requested, when, and which browser you’re using
• A short-lived rate-limit token (a hash of your IP, kept for one hour) to prevent abuse of the newsletter signup form
• If you’ve consented to analytics via our cookie banner: anonymised data about how you use the site (which pages you visit, how long you stay, whether you came from a search engine or another site, your approximate region and device type) — this comes via Google Analytics 4 and is not linked back to your email subscription or any identifiable personal information

We do not collect:

• Bank, financial, or pension-specific information about you (we have nothing to do with your actual pension)
• Your real name, unless you provide it
• Your physical address
• Information about children — see Section 10

3. How we use your information

We use your information for these purposes only:

1. To send you the newsletter you asked to receive
2. To respond when you contact us
3. To prevent abuse (spam submissions, brute-force attempts on the newsletter form)
4. To understand how the site is used and improve it (only with your analytics consent)
5. To meet our legal obligations (HMRC, tax records, lawful requests)

We don’t:

• Build advertising profiles on you
• Re-target you on other websites
• Sell your information to anyone
• Trade or share your information with other publishers or marketers

4. Our legal bases for processing

Under UK GDPR, we need a lawful basis to process your personal information. We rely on:

• Consent (Article 6(1)(a)) for sending you the newsletter, and for any analytics cookies — you opt in, and you can withdraw at any time
• Legitimate interests (Article 6(1)(f)) for security logging and correspondence — we have a clear interest in running a working website, and these don’t override your rights
• Legal obligation (Article 6(1)(c)) when we need to keep records (e.g. for tax law)

You always have the right to ask us to stop processing on any of these bases — see Section 8.

5. Who else sees your information

We use a small number of trusted service providers (“processors”) to run the site. They process information on our behalf, under written contracts that meet UK GDPR’s requirements.

MailerLite (UAB MailerLite, Vilnius, Lithuania) — handles the newsletter. Your email address is stored on their EU-hosted servers. They send the confirmation email and the fortnightly newsletter on our behalf. MailerLite’s Privacy Policy.

Google (Google Ireland Ltd, with the parent Google LLC in the US) — provides Google Analytics 4. Only loaded if you’ve granted analytics consent via our cookie banner. Analytics data is anonymised and aggregated; we don’t link it back to individual subscribers, and Google Analytics doesn’t collect your IP address. Google’s Privacy Policy.

Our hosting provider — runs the web server. Server logs (including your IP address when you load a page) are kept for security and operational purposes for 30 days, then deleted.

We do not share your information with any other third parties unless:

• You give us specific consent
• We are legally required to (e.g. valid court order, HMRC request)

6. International transfers

Some of the services above are based outside the UK. When your information goes abroad, we rely on the following safeguards:

• MailerLite (Lithuania) — EU/EEA, where UK GDPR adequacy applies
• Google Analytics (US) — protected by Standard Contractual Clauses and Google’s adherence to the EU-US Data Privacy Framework
• VitaVerse LLC (US) — as the parent of Pension Plain, we apply UK GDPR-equivalent protections internally

If you’d like the specifics of a particular transfer mechanism, email us.

7. How long we keep your information

Type of information	How long we keep it
Newsletter subscription	While you remain subscribed, plus 30 days after you unsubscribe (so we don’t accidentally re-add you)
Email correspondence	2 years from the last reply, unless we need to keep it longer
Server logs	30 days
Rate-limit transients	1 hour
Analytics data (Google Analytics)	14 months, the maximum allowed by GA4
Tax records (where applicable)	6 years (HMRC requirement)

When we no longer need your information, we delete it.

8. Your rights

Under UK GDPR you have the following rights in relation to information we hold about you:

• Right of access — ask what we hold about you, and get a copy
• Right to rectification — ask us to correct inaccurate information
• Right to erasure (“right to be forgotten”) — ask us to delete your information, subject to limited legal exceptions
• Right to restrict processing — ask us to pause processing while a question is resolved
• Right to data portability — get your information in a machine-readable form
• Right to object — to processing based on legitimate interests
• Right to withdraw consent — at any time, where we rely on consent. For analytics, you can revoke at any time via the cookie preferences button bottom-left of any page

To exercise any of these rights, email info@pensionplain.co.uk with the subject “Privacy request” and tell us what you’d like to do. We’ll respond within one calendar month. If we need to extend this (we usually won’t), we’ll tell you why. You don’t pay anything to make a request. We may ask for proof of identity if it’s not obvious.

If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office (the UK’s privacy regulator):

• Online: ico.org.uk/concerns
• Phone: 0303 123 1113

We’d appreciate the chance to fix it first, but you don’t have to come to us before going to the ICO.

9. Cookies and similar technologies

We use Google Analytics 4 to understand how the site is used, but only after you’ve given consent via our cookie banner. Until you click “Accept all” or toggle “Analytics” on in the preferences modal, no analytics scripts load and no analytics cookies are set. The full picture — what cookies we use, what they’re for, and how to control them — is in our Cookie Policy.

10. Children

Pension Plain is intended for adults thinking about their pensions. We don’t knowingly collect personal information from children under 13. If you’re a parent or guardian and you believe your child has subscribed, email us and we’ll delete their information.

11. Changes to this policy

We may update this policy occasionally — for example, when we add a new service or a regulator issues new guidance. The “Last updated” date at the top tells you when it last changed. For substantive changes, we’ll notify newsletter subscribers by email. Continued use of the site or newsletter after a change means you accept the updated policy.

12. Contact

For any privacy question, email info@pensionplain.co.uk with the subject “Privacy”. We aim to reply within five working days. For formal requests we’ll respond within one calendar month, as required by UK GDPR.