Privacy Policy

1. Who We Are

Company name: Y2 Architecture Studio Ltd
Registered office: The Gables, Carluke, ML8 4BL
Company registration number: SC793033
Place of business: Scotland, United Kingdom

Nature of business: Architectural services

Data Controller: Y2 Architecture Studio Ltd

Contact details:
Email: info@y2architecture.studio
Postal address: The Gables, Carluke, ML8 4BL

As architects, we are required by the Architects Registration Board (ARB) to act with integrity, maintain confidentiality, and protect client information. This policy reflects those obligations.

2. What Personal Data We Collect

We collect only the personal data necessary to provide architectural services and operate our business.

a) Client and Project Data

This may include:

  • Client name(s)

  • Email address

  • Telephone number

  • Postal address

  • Property address

  • Information relating to residential design projects

  • Drawings, plans, surveys, reports, and specifications

  • Information required for planning applications and building warrant applications

b) Enquiries and Correspondence

If you contact us via our website, email, or phone, we may collect:

  • Your name

  • Contact details

  • Details of your enquiry

c) Website Usage Data

When you visit our website, we may collect limited technical information, such as:

  • IP address

  • Browser type

  • Pages visited

  • Date and time of visits

This data is used only to understand website performance and improve user experience.

3. How We Use Your Personal Data

We use personal data for the following purposes:

  • Providing architectural and design services

  • Preparing, submitting, and managing planning applications and building warrant applications

  • Communicating with clients, consultants, and local authorities

  • Complying with legal, regulatory, and professional obligations

  • Responding to enquiries

  • Maintaining internal records, including for insurance and professional liability purposes

We do not use personal data for marketing unless you have explicitly consented.

4. Lawful Basis for Processing

Under UK GDPR, we process personal data on the following lawful bases:

  • Contract – processing necessary to perform architectural services

  • Legal obligation – compliance with statutory and regulatory requirements

  • Legitimate interests – running our architectural practice in a professional and secure manner

  • Consent – where required, and where explicitly given

5. Sharing Personal Data

We only share personal data where it is necessary and appropriate, including with:

  • Local authorities (for planning and building warrant submissions)

  • Consultants involved in your project (e.g. structural engineers, surveyors)

  • Contractors where relevant to the project

  • Professional advisers (e.g. insurers, accountants)

  • Regulatory or statutory bodies where legally required

All third parties are expected to handle personal data in accordance with applicable data protection laws.

We do not sell or trade personal data.

6. Confidentiality and Professional Standards

In line with the ARB Code of Conduct, we treat client information as confidential and take reasonable steps to safeguard it against unauthorised access, disclosure, or misuse.

7. Data Storage and Security

We implement appropriate technical and organisational measures to protect personal data, including secure storage and controlled access.

Personal data is only accessed where necessary for legitimate business and professional purposes.

8. Data Retention

We retain personal data only for as long as necessary, including:

  • For the duration of the project

  • To meet legal and regulatory requirements

  • To satisfy professional indemnity insurance and record-keeping obligations

Once data is no longer required, it is securely deleted or anonymised.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate or incomplete data

  • Request erasure of your data (where applicable)

  • Restrict processing

  • Object to processing

  • Request data portability

  • Withdraw consent (where processing is based on consent)

Requests can be made using the contact details above.

10. Complaints

If you have concerns about how we handle your personal data, you have the right to complain to the Information Commissioner’s Office (ICO):

Website: www.ico.org.uk
Telephone: 0303 123 1113

Cookie Policy

11. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly and provide information about how the site is used.

12. Cookies We Use

Our website uses essential cookies and may use basic analytics cookies.

Essential Cookies

These cookies are necessary for the website to function correctly and cannot be switched off.

Analytics Cookies (if applicable)

Analytics cookies help us understand how visitors use our website, such as which pages are visited most often. This information is anonymous and used only to improve the website.

13. Managing Cookies

You can control or delete cookies through your browser settings. Please note that disabling cookies may affect how the website functions.

14. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time. Any changes will be published on this page with an updated revision date.