Privacy policy

How we handle your personal data, project files and order details.

Last updated: 19 October 2026

1. Who we are

This website and the remote architectural design service offered on it are operated by DIEGO GALVEZ AYUSO LIMITED, a company registered in England and Wales under company number 16847578, trading as Diego Galvez Ayuso.

Registered office: 47 Carnaby Street, London, England, W1F 9PT.
Email: [email protected]
Phone: +44 7418 562937
Website: diegogalvezayuso.co.uk

We are the controller of the personal data described in this policy and process it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data we collect

Information you give us

  • Identity and contact details: your name, email address, phone number and correspondence address.
  • Property details: the address of the property to be designed, its type and the work you are planning.
  • Photos, video and plans of your home: walk-through videos, photographs of rooms and elevations, measurements, existing drawings, title plans and anything else you send so we can survey the property remotely. These may show people, belongings or neighbouring properties.
  • Ownership information: confirmation that you own the property or have the owner's authority, and where needed the owner's name and details from title documents, as required for planning and certificate forms.
  • Order details: when you place an order through the basket on our website we receive your name, email, phone, property address, town or city, postcode, project comments, the packages chosen, the order total and your preferred payment method.
  • Video call content: notes taken during design calls. We do not record calls unless we ask you first and you agree.
  • Payment records: invoice amounts and payment status. Card details are entered only on the secure page of the payment provider and are never seen or stored by us.

Information collected automatically

Our website does not use analytics or advertising cookies and does not store basket or form data in your browser. Our hosting provider keeps standard server logs (IP address, browser type, pages requested, time of request) for security and troubleshooting.

3. Purposes and legal bases

PurposeLegal basis (UK GDPR Art. 6)
Answering enquiries and preparing a quoteSteps taken at your request before entering into a contract
Processing your order, surveying the property remotely, producing drawings and 3D visualisationsPerformance of a contract
Preparing and submitting planning, lawful development and building regulations applications on your behalfPerformance of a contract
Sharing your drawings and property information with a structural engineer or other consultantConsent
Invoicing, accounting and tax recordsLegal obligation
Keeping project files to answer later questions, defend claims and support future work on the same propertyLegitimate interests
Keeping our website and systems secureLegitimate interests
Recording a design call, or using images of your completed project in our portfolioConsent

Where we rely on legitimate interests, we have balanced them against your rights and you may object at any time (see section 9).

4. Who we share data with

  • Local planning authorities and building control bodies. When we submit an application for you, your name, the property address, drawings and supporting documents go to the council directly or through the Planning Portal. Planning applications are public: councils publish drawings, forms and comments on their online planning register, so these become visible to anyone. Councils normally remove phone numbers, email addresses and signatures, but we keep personal details on public documents to the minimum required.
  • Structural engineers and other consultants (for example party wall surveyors) — only with your consent, and only the drawings and information they need for their part of the work.
  • Cloud storage and collaboration services that hold project files, shared folders and email, acting as our processors under written contracts.
  • Video call providers used for design meetings.
  • Payment providers for the method you choose (card processor, Apple Pay, Google Pay, Klarna, PayPal or your bank), who process payments as independent controllers under their own privacy notices.
  • Our accountant and, where required, HM Revenue & Customs.
  • Professional advisers and insurers, or authorities where the law requires disclosure.

We do not sell personal data and do not share it for marketing by others.

5. International transfers

Some of our cloud, email and video call providers may store or access data outside the UK. When this happens we make sure the transfer is protected by UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with the provider's security measures. You can ask us for details of the safeguards in place.

6. How long we keep data

  • Enquiries that do not lead to an order: up to 12 months from our last contact.
  • Project documentation (drawings, survey photos and video, correspondence, application documents): 6 years after the project ends, and up to 15 years for building regulations drawings, in line with limitation periods for professional liability claims.
  • Raw walk-through video: deleted 12 months after final drawings are issued, once it has been converted into survey drawings, unless you ask us to keep it longer.
  • Invoices and accounting records: 6 years after the end of the financial year, as required by law.
  • Server logs: up to 90 days.

Documents submitted to a council are kept by that council under its own retention rules, which we do not control.

7. Security

Project files are kept in access-controlled cloud storage with encryption in transit and at rest, two-factor authentication on our accounts, and folders shared only with the people working on your project. Personal details entered at checkout on this website are not stored in your browser or sent to any server from the page itself. No system is completely secure, so if a breach affecting your data occurs we will notify you and the ICO where the law requires.

8. Cookies

This website does not set cookies and does not use analytics, tracking pixels or local storage. The fonts on this site are loaded from Google Fonts, which receives your IP address to deliver the font files. If we introduce non-essential cookies in future, we will ask for your consent first and update this policy.

9. Your rights

Under UK GDPR you have the right to:

  • Access — receive a copy of the personal data we hold about you.
  • Rectification — have inaccurate or incomplete data corrected.
  • Erasure — ask us to delete your data where there is no longer a reason to keep it.
  • Restriction — ask us to limit how we use your data, for example while a dispute about accuracy is resolved.
  • Portability — receive data you provided in a structured, machine-readable format, or have it sent to another provider.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — at any time, where processing is based on consent.

To exercise any right, email [email protected]. We respond within one month and do not charge a fee in most cases. We may ask you to confirm your identity. Please note that we cannot remove documents already published by a council on its planning register; you would need to contact the council directly.

11. Complaints

If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk, helpline 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

12. Children

Our services are intended for adults who own or are responsible for a property. We do not knowingly collect data from anyone under 18. Children may appear incidentally in photos or video of a home; we use such footage only for surveying and never publish it.

13. Changes to this policy

We may update this policy when our services or the law change. The current version is always on this page with its "Last updated" date. If a change materially affects how we use data you have already given us, we will tell you by email.