Privacy Notice

 

Last updated: January 2026

Citizens Design Bureau ("we," "our," or "us") is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection legislation, we are the data controller.

 

1. What Personal Data We Collect

Depending on how you interact with us, we may collect the following information:

  • Client & Project Data: Name, job title, email address, phone number, postal address, and site addresses.

  • Inquiry Data: Information you provide when filling in forms on our website or contacting us directly.

  • Website Usage Data: Information on how you use our website, your IP address, browser type, and page visits (collected via cookies). [

 

2. Why We Collect Your Data

We use your information to:

  • Provide architectural design, and consultancy services.

  • Communicate with you regarding your project, inquiries, or contracts.

  • Fulfill our legal and regulatory obligations.

  • Improve our website and services.

 

3. Our Lawful Basis for Processing

We only process your personal data when we have a lawful basis to do so under UK GDPR:

  • Contractual Necessity: To perform or enter into a contract with you (e.g., architectural services).

  • Legitimate Interests: To run our business efficiently, manage inquiries, and improve our services, provided your rights do not override these interests.

  • Legal Obligations: Where we need to comply with a legal obligation (e.g., planning, building regulations, or tax laws).

  • Consent: Where you have explicitly given us permission (e.g., to subscribe to a newsletter).

 

4. How We Share Your Information

We do not sell your personal data. We may share your data with trusted third parties only where necessary, including:

  • Consultants, engineers, and sub-contractors working on your project.

  • Local planning authorities and building control bodies.

  • IT service providers, website hosts, and cloud storage providers.

  • Professional advisors, such as accountants or legal consultants.

 

5. How Long We Keep Your Data

We will not retain your personal data for longer than necessary. For architectural projects, we typically retain project files and associated personal data for 7 to 12 years after the completion of the project to ensure we can resolve any structural or design disputes.

 

6. Your Rights

Under data protection law, you have specific rights regarding your personal data, including:

  • Right of access: You can ask for copies of your personal data that are reasonable and proportionate.

  • Right to rectification: You can ask us to correct inaccurate or incomplete data.

  • Right to erasure: You can request that we delete your personal data.

  • Right to object: You can object to the processing of your personal data.

 

7. Data Protection Complaints Process

If you have any questions about this privacy notice, or if you wish to make a complaint about how we handle your personal data, you can contact us directly:

  • Email: everyone@citizensdesignbureau.net

  • Phone: 02030959732

  • Post: Unit 19A, 39 Gransden Avenue, London E8 3QA

 

Under UK data protection law, you have a legal right to raise a data protection complaint directly with us. We will acknowledge your complaint within 30 days of receipt, investigate it thoroughly, and provide a full response without undue delay.

If you are unsatisfied with our response, you can subsequently escalate your concerns to the Information Commissioner's Office (ICO):

  • ICO Website: Make a Complaint - ICO Helpline: 0303 123 1113