Privacy Policy

DOR Architects Limited (company no. 12692447, registered in England & Wales) ("we", "us") is the data controller for personal data collected through dorarch.com, our enquiry forms and our client portal. Contact: studio@dorarch.com, 7 Hayes Crescent, London NW11 0DG.

We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

Enquiry and brief details you give us: name, email, phone number, site address, project type, budget range and project description.

Client portal information: account email, project documents, proposals, agreements, signatures and messages relating to your project.

Website usage: pages visited, the referring website, device type and an anonymous visitor identifier. If you accept analytics cookies, Google Analytics also collects usage data (see our Cookie Policy).

We do not knowingly collect special category data, and our services are not directed at children.

To respond to your enquiry and prepare a proposal — lawful basis: steps at your request before entering a contract.

To deliver architectural services and manage your project, including agreements and invoicing — lawful basis: performance of a contract and legal obligations (for example tax and professional record-keeping).

To understand how our website is used and improve it — lawful basis: legitimate interests, and consent where cookies are involved.

To send occasional studio news only if you have opted in — lawful basis: consent, which you can withdraw at any time.

We do not sell your data and we do not make decisions about you by automated means alone.

Trusted service providers that host our website, database, file storage and email, acting on our instructions under data processing terms.

With your agreement, consultants and contractors involved in your project (for example structural engineers or surveyors), and planning authorities when we submit applications on your behalf — planning applications are published on public registers.

Google, if you accept analytics cookies. Professional advisers, insurers and regulators (such as ARB or RIBA) where required.

Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the International Data Transfer Agreement / UK Addendum safeguards.

Enquiries that do not proceed: up to 2 years, then deleted.

Client project records: for the duration of the project and up to 15 years afterwards, reflecting limitation periods for professional liability claims (including deeds) and our insurers' requirements.

Financial records: 6 years from the end of the financial year, as required by HMRC.

You have the right to access your data, correct it, have it erased, restrict or object to its processing, and receive it in a portable format. Where we rely on consent you may withdraw it at any time.

To exercise any right, email studio@dorarch.com. We will respond within one month.

If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Data is transmitted over encrypted connections. Client documents are held in private storage and accessed through time-limited links, and portal access is restricted to authorised accounts.

We may update this policy. The latest version will always be on this page with its revision date.