top of page

privacy policy

This privacy policy aims to explain how jnf architecture uses the personal data we collect using the Internet and other electronic communications.

jnf architecture limited is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect personal data in accordance with:

​

UK General Data Protection Regulation (UK GDPR)

​

Data Protection Act 2018

​

Architects Registration Board (ARB) Standards of Conduct and Practice

​

Royal Institute of British Architects (RIBA) Professional Code of Conduct

 

Who we are

​

Data Controller: jnf architecture limited


Company number: 12356890

​

Email: studio@jnfarchitecture.co.uk


Telephone: 01273 937537

​

jnf architecture limited determines the purposes and means of processing personal data.

 

Definitions

​

Personal Data – Any information relating to an identified or identifiable natural person

​

Processing – Any operation performed on personal data (collection, storage, use, disclosure, deletion)

​

Data Processor – A third party processing data on behalf of the Data Controller

 

What personal data we collect

​

In the course of providing professional architectural services, we may collect:

  • Names, job titles, postal addresses

  • Email addresses and telephone numbers

  • Client instructions and correspondence

  • Project, site, and property-related information

  • Contractual and fee-related information

  • Records required to meet professional, legal, and insurance obligations

​

We do not intentionally collect special category personal data unless legally required or explicitly provided.

 

How we collect your data

​

We collect personal data when you:

  • Enquire about or commission our services

  • Enter into a professional appointment or contract

  • Communicate with us by email, phone, post, or in person

  • Use our website (via cookies and analytics tools)

  • Provide feedback or reviews

 

Lawful bases for processing (GDPR)

​

We process personal data on one or more of the following lawful bases:

  • Contract – to perform or prepare for a professional appointment

  • Legal obligation – to comply with statutory, regulatory, ARB, or insurance requirements

  • Legitimate interests – to manage our practice, maintain records, and respond to enquiries

  • Consent – where required, including for non-essential cookies

 

How we use your data

​

We use personal data to:

  • Deliver architectural and professional services

  • Communicate with clients, consultants, and authorities

  • Maintain project and statutory records

  • Meet ARB, RIBA, and professional indemnity insurance requirements

  • Manage practice administration and quality assurance

 

Data sharing (professional context)

​

Personal data may be shared where necessary and proportionate, including with:

  • Local Planning Authorities and Building Control

  • Professional consultants (e.g. engineers, surveyors, contractors)

  • Legal, financial, and insurance advisers

  • Regulatory bodies where legally required

 

All recipients are expected to process data lawfully and securely.


We do not sell personal data or use it for unsolicited marketing.

 

Data processors & international transfers

​

We use reputable third-party processors, including:

  • HubSpot – client relationship management

  • Google Workspace – email and secure cloud storage

  • Wix – website hosting

  • Google Analytics – anonymised website analytics

 

Some providers may process data outside the UK. Where this occurs, transfers are safeguarded using UK adequacy regulations or approved contractual mechanisms.

 

Data storage and retention (ARB & RIBA aligned)

​

Personal data is stored securely using encrypted cloud services and restricted-access systems.

​

In line with professional best practice, limitation periods, and professional indemnity insurance requirements, we retain personal data for:

  • 6 years for standard contractual records

  • Up to 12 years where contracts are executed as deeds or where extended liability periods apply

 

At the end of the retention period, data is securely deleted or anonymised.

 

Marketing

​

jnf architecture limited does not use client data for direct marketing without explicit consent.


We do not pass personal data to third parties for marketing purposes.

 

Your data protection rights

​

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate or incomplete data

  • Request erasure (where legally applicable)

  • Restrict processing

  • Object to processing

  • Request data portability

 

We will respond within 30 days.

​

To exercise your rights, contact:


studio@jnfarchitecture.co.uk
01273 937537

 

Jersey Projects & Services

​

jnf architecture limited is based in the United Kingdom and primarily processes personal data in accordance with UK GDPR and the Data Protection Act 2018.

​

Where we provide services in Jersey, Channel Islands personal data may be processed in connection with those projects. Jersey is recognised as providing an adequate level of data protection, and personal data is handled in a manner consistent with UK data protection principles.

​

No additional international data transfers are carried out beyond those necessary for the delivery of professional services.

​

Cookies

​

Our website uses cookies to ensure functionality and understand usage patterns.

  • Essential cookies – required for site operation

  • Analytics cookies – used only with consent (Google Analytics)

 

You can manage cookie preferences through our website banner or browser settings.

Further guidance:


https://ico.org.uk/your-data-matters/online/cookies/

​

Links to other websites

​

Our website may include links to external sites. We are not responsible for their privacy practices and encourage reviewing their privacy policies.

 

Changes to this policy

​

We review this policy regularly and update it to reflect legal, regulatory, or practice changes.

 

Complaints

​

If you are dissatisfied with how your data is handled, you may contact the UK supervisory authority:

Information Commissioner's Office


Website: https://ico.org.uk/global/contact-us/


Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

 

​

Reviewed: January 2026
By: Nuno Franco – Director

bottom of page