🇬🇧

UK COMPLIANCE

We comply with UK GDPR, DUAA 2025, and PECR.

1. Personal Data We Collect
Comments: Info you provide, IP, browser info, Gravatar hash. Lawful basis: consent
Media Uploads: EXIF location data removed. Lawful basis: consent
Contact Forms & Subscriptions: name, email, phone; opt-in required. Lawful basis: consent
Cookies: login/session, display prefs, comments, pop-ups (1 day–1 year). Lawful basis: consent or legitimate interests
Embedded Content: videos/images; data collected by third parties. Lawful basis: consent/legitimate interests
Analytics: Google Analytics, ExactMetrics, Popup Maker. Lawful basis: legitimate interests
Email/Newsletters: MailPoet; tracking opens/clicks. Lawful basis: consent
Image Optimisation: WP Smush/Stackpath CDN; limited logs. Lawful basis: legitimate interests

2. Data Sharing
Trusted providers: Google, ExactMetrics, MailPoet, WP Smush/Stackpath CDN, Popup Maker.
Third-party subscription services (Mailchimp) may process data.
Data outside UK: UK SCC addendum applied.

3. Data Retention
Comments: indefinitely
User profiles: indefinitely
Subscribers: until unsubscribe/deletion
Cookies: 1 day–1 year
CDN logs: 7 days

4. Your Rights (UK)
Access, correct, delete, restrict/object, data portability, withdraw consent.
Complaints: ICO

5. Security & Breach Procedures
Trained staff, secure servers, restricted access. Breaches notified to ICO promptly.

6. Automated Decision-Making
Not used.

7. Regulatory Compliance
Chartered Architects, comply with RIBA disclosure requirements.

8. Cookie Policy (UK)
We use cookies to enhance your browsing experience.
Users can Accept All OR Reject Non-Essential. Duration: session or 1 month
Explicit consent is required for non-essential cookies.

🇪🇺

EU COMPLIANCE

We comply with EU GDPR 2016/679 and ePrivacy Directive.

1. Personal Data We Collect
Comments: Info you provide, IP, browser info, Gravatar hash. Lawful basis: consent
Media Uploads: EXIF location data removed. Lawful basis: consent
Contact Forms & Subscriptions: name, email, phone; opt-in required. Lawful basis: consent
Cookies: login/session, display prefs, comments, pop-ups (1 day–1 year). Lawful basis: consent required for non-essential cookies
Embedded Content: videos/images; data collected by third parties. Lawful basis: consent/legitimate interests
Analytics: Google Analytics, ExactMetrics, Popup Maker. Lawful basis: legitimate interests
Email/Newsletters: MailPoet/Mailchimp; tracking opens/clicks. Lawful basis: consent
Image Optimisation: WP Smush/Stackpath CDN; limited logs. Lawful basis: legitimate interests

2. Data Sharing
Trusted providers: Google, ExactMetrics, MailPoet, WP Smush/Stackpath CDN, Popup Maker.
Third-party subscription services (Mailchimp) may process data.
Data outside EU: EU SCC or EU–US Data Privacy Framework applied.

3. Data Retention
Comments: indefinitely
User profiles: indefinitely
Subscribers: until unsubscribe/deletion
Cookies: 1 day–1 year
CDN logs: 7 days

4. Your Rights (EU)
Access, correct, delete, restrict/object, data portability, withdraw consent.
Complaints: local DPA

5. Security & Breach Procedures
Trained staff, secure servers, restricted access. Breaches notified to local DPA promptly.

6. Automated Decision-Making
Not used.

7. Regulatory Compliance
RIBA Chartered Practice, comply with RIBA disclosure requirements.

8. Cookie Policy (EU)
We use cookies to improve site functionality, analyze usage, and deliver content. Categories include Strictly Necessary, Functional/Preferences, Performance & Analytics, Marketing & Targeting, and Third-Party. Duration: session or 1 month.
Explicit prior consent required for all non-essential cookies.

Return to our home page.