Privacy Policy

Effective from 3 August 2026.

This Privacy Policy explains the personal data Architon LLP collects through its website, how we use and disclose that data, how long we keep it, and the choices and rights available to you.

Architon's promise

Trust is important to our work. We aim to earn and maintain that trust by communicating clearly, protecting the personal data in our care and giving you meaningful choices.

We do not sell or rent personal data. We disclose it only where necessary to operate and protect the website, provide a feature you request, communicate with you, obtain necessary support, comply with law or deal with legal claims. Optional Google services are not activated until you make the relevant choice.

1. Policy application

This policy applies to the following categories of people:

  • Website Visitors are people who visit an Architon website that links to this policy, manage their privacy choices or choose to use an optional website feature.
  • People Who Contact Us are people who contact Architon using an email address, telephone number or postal address published on the website.

For this policy, Website means the Architon website on which this policy is displayed. This policy does not apply to third-party websites reached through links from the Website. It also does not cover personal data processed as part of an architectural appointment or other client work. We provide the relevant privacy information for that processing separately.

Architon LLP is the controller of the personal data described in this policy.

2. Information we collect

Website Visitors

  • Log files: When you visit the Website, SiteGround processes technical information needed to deliver and protect it. This may include your Internet Protocol address, request time and address, referring page, browser or device information, response and cache information, and related security data.
  • Cookies and similar technologies: The Website uses local storage in your browser to record your privacy choices and the time they were updated. SiteGround may also use or recognise storage or access technologies where an enabled caching or security function requires them.
  • Analytics information: If you allow Analytics, Google Analytics processes online identifiers, page and referring addresses, interactions, dates and times, browser and device details, language, and approximate location. Your Internet Protocol address is transmitted to Google and may be used to derive approximate location, but it is not made available to Architon in Google Analytics.
  • Embedded map information: If you select Load map or allow Maps, Google receives technical information including your Internet Protocol address, the page address and browser or device information, and may use cookies or similar technologies.

We treat online identifiers and associated usage information as personal data.

People Who Contact Us

  • Contact and correspondence information: We may receive your name, organisation, email address, telephone number and any other personal data included in your enquiry or later correspondence.

Providing information in an enquiry is voluntary. We may be unable to answer if you do not give us enough information to understand the enquiry and reply.

3. How we use information we collect

We process personal data in ways that are relevant to the reason it was collected. We use it to:

  • Operate, maintain, cache, deliver and improve the Website.
  • Detect, investigate and prevent malicious activity, unauthorised access and technical problems.
  • Respond to questions and enquiries and manage our correspondence.
  • Understand how Website Visitors reach and use the Website after they allow Analytics.
  • Display the Google map after a visitor requests it or allows Maps.
  • Record and apply the privacy choices made through Cookie settings.
  • Comply with legal obligations and establish, exercise or defend legal claims.
  • Carry out another purpose where we have first obtained any consent required by law.

4. Data aggregation

We use aggregated website statistics to understand general patterns, such as which pages are visited and how the Website performs. We do not use aggregated reports to identify individual Website Visitors. Information that has been rendered anonymous so that it no longer relates to an identifiable person is not personal data.

5. Information sharing

We work with organisations that provide services needed to operate the Website and our communications. They receive personal data only where it is relevant to the service they provide.

The recipients described by this policy are:

  • SiteGround, which hosts, caches, delivers and helps secure the Website.
  • Google, when you allow Google Analytics or load Google Maps.
  • Our email and telecommunications providers, which deliver communications between you and Architon.
  • Website and information technology providers that need access to maintain or secure the Website.
  • Courts, regulators, public authorities and professional advisers where disclosure is required by law or necessary to establish, exercise or defend legal claims.

Providers acting on our behalf are required to process personal data in accordance with our instructions, their contracts with us and applicable confidentiality, data-protection and security requirements. A provider that processes personal data for its own purposes is responsible for explaining that processing.

Google explains how it processes information received through Google services at https://policies.google.com/privacy.

6. Notice to European Union and United Kingdom residents

Personal data in this policy has the same meaning as personal data under the United Kingdom General Data Protection Regulation and, where applicable, the European Union General Data Protection Regulation.

The United Kingdom General Data Protection Regulation and the Data Protection Act 2018 apply to Architon's processing. The European Union General Data Protection Regulation applies to a processing activity only where its territorial rules cover that activity, including where we offer services to people in the European Economic Area or monitor their behaviour there.

Our lawful basis depends on the purpose and context of the processing:

  • Before entering into a contract: We use information where necessary to take steps at your request in relation to a possible contract with you.
  • Legitimate interests: We use information to respond to other enquiries, administer business relationships, deliver and secure the Website, record privacy choices, and protect our systems and business. We consider the effect of this processing on your rights before relying on this basis.
  • Consent: We use Google Analytics and load Google Maps only after you make the relevant choice. You may withdraw consent at any time through Cookie settings.
  • Legal obligation: We use or disclose information where necessary to comply with an obligation imposed by law.

Under the Privacy and Electronic Communications Regulations, the local-storage record of your privacy choices is strictly necessary to provide the privacy control you requested. We rely on an exception from consent for another storage or access technology only after confirming that the particular technology qualifies.

7. International information transfers

SiteGround and Google may process personal data outside the United Kingdom and the European Economic Area.

For a restricted transfer from the United Kingdom for which Architon is responsible, we use:

  • A United Kingdom adequacy regulation where available.
  • United Kingdom approved contractual safeguards, such as the International Data Transfer Agreement or the United Kingdom Addendum to the European Commission standard contractual clauses.

Where the European Union General Data Protection Regulation applies to a transfer from the European Economic Area, we use:

  • An applicable European Commission adequacy decision.
  • The European Union and United States Data Privacy Framework for a certified recipient.
  • European Commission standard contractual clauses.

Contact us for information about the safeguard used for a particular recipient and how to obtain a copy.

8. Data subject rights and choices

You can reject optional features and still use the Website. Cookie settings allows you to review or change your choices at any time. A change stops future optional processing but does not affect processing that occurred before the change.

Depending on the circumstances, you may have the right to:

  • Ask for confirmation that we process your personal data and obtain a copy.
  • Ask us to correct inaccurate or incomplete personal data.
  • Ask us to delete personal data.
  • Ask us to restrict how we use personal data.
  • Receive certain personal data in a portable form.
  • Object to processing based on our legitimate interests.
  • Withdraw consent at any time where we rely on consent.

To exercise a right, contact us using the details below.

You may also make a complaint to the Information Commissioner's Office. Its complaint information is available at https://ico.org.uk/make-a-complaint/.

Where the European Union General Data Protection Regulation applies, you may complain to a competent European Economic Area supervisory authority, particularly in the country of your habitual residence, your place of work or the alleged infringement. Contact details are available at https://www.edpb.europa.eu/about-edpb/our-members_en.

9. Data security, data integrity and access

We take reasonable steps intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Access is limited to people and providers who need the information for a purpose described in this policy.

10. Data retention

We keep personal data only for the period needed for the purpose described below, subject to legal and professional requirements:

  • Enquiries: If an enquiry does not become client work, we keep it for no more than 24 months after our last meaningful contact, unless we need it for longer to comply with law or deal with a legal claim. If we accept an instruction, we provide the privacy information and retention period that apply to the resulting client record before using the correspondence for that purpose.
  • Access logs: SiteGround makes raw Website access logs available to us for up to 30 days. We may keep a relevant extract for the period needed to investigate an incident, prevent abuse, comply with law or handle a legal claim.
  • Privacy choices: The local-storage record remains in your browser until you clear it or the Website replaces it with a new version.
  • Google Analytics: We configure user-level and event-level data to be retained for 14 months. The exact Analytics cookies and their durations are shown in Cookie settings.
  • Google Maps: We do not keep a separate record of your interaction with the map. Google explains its own retention in its privacy policy.

When a retention period ends, we delete or anonymise the information unless we must retain it for a legal or professional reason.

11. Notification of changes

We may update this policy to reflect changes to the Website, our processing or applicable law. We will publish the updated policy on the Website and change the effective date above. If a change materially affects how we use personal data, we will provide a more prominent notice where appropriate and obtain consent where the law requires it.

12. Contact information

Questions, rights requests and complaints may be sent to:

  • Architon LLP
  • Upper Deck, 17A West Street, Epsom, Surrey, KT18 7RL
  • Email: [email protected]
  • Telephone: +44 (0) 1372 745600