GDPR and Cookies Policy

Vision + Design Ltd
Last updated: April 2026

GDPR and Cookies Policy

Vision + Design Ltd
Last updated: April 2026

Introduction


Vision + Design Ltd is committed to protecting and respecting your privacy.

This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our practices regarding your personal data and how we will treat it.


The rules on processing of personal data are set out in the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR), as updated by the Data (Use and Access) Act 2025.

Definitions


Data controller — A controller determines the purposes and means of processing personal data.


Data processor — A processor is responsible for processing personal data on behalf of a controller.


Data subject — A natural person whose personal data is being processed.


Personal data — Any information relating to an identifiable person who can be directly or indirectly identified, for example by name, address, email address or online identifiers such as IP addresses and cookies.


Special categories of personal data — Sensitive personal data including racial or ethnic origin, political opinions, religious beliefs, health data, biometric data and sexual orientation.


Processing — Any operation performed on personal data, including collection, storage, use, disclosure or deletion.

Who Are We?


Vision + Design Ltd is the data controller. This means we determine how your personal data is processed and for what purposes.


Vision + Design Ltd

The Society Building,

55 Whitfield Street,

London,

W1T 4AH

info@visionanddesign.co.uk

David Campbell: +44 7931 910243

Chris Cheuk: +44 7717 895687

The Purposes of Processing Your Personal Data


We use your personal data for the following purposes:


  • To respond to enquiries and communicate with you about potential projects

  • To maintain contact and communication throughout the delivery of a project

  • To maintain our own records and accounts

  • To fulfil our legal and professional obligations as a RIBA-chartered practice, including under CDM 2015 and Building Regulations 2024

  • To purchase goods, materials and services from suppliers

The Categories of Personal Data We Process


We may process the following categories of personal data:


  • Name, address, email address and telephone number

  • Project-related correspondence and documentation

  • Financial data for payment purposes, including bank details and VAT registration numbers


We obtain your personal data directly from you, from your employees or representatives, or from publicly available sources.

Sharing Your Personal Data


Your personal data will be treated as strictly confidential and shared only where necessary. We may share relevant data with:


  • Members of the project design team, including structural engineers, M&E consultants and other specialist consultants

  • Contractors and subcontractors engaged on your project

  • Statutory bodies including local planning authorities, building control bodies and the Health and Safety Executive, where required for regulatory submissions

  • Our accountants, solicitors and insurers where necessary

  • IT and software service providers acting as data processors on our behalf, including Microsoft 365


We do not sell, rent or trade your personal data to any third party.

How Long Do We Keep Your Personal Data?


We retain personal data only for as long as is reasonably necessary:


  • Enquiries that do not proceed to commission — up to 12 months from last contact

  • Client project records — up to 10 years following practical completion, in line with standard limitation periods and ARB/RIBA professional obligations

  • Financial and invoicing records — 7 years in accordance with HMRC requirements

  • Contracts executed as a deed — up to 12 years for legal purposes

Lawful Basis for Processing


We process your personal data on the following lawful bases under UK GDPR:


  • Performance of a contract — where processing is necessary to deliver our services to you

  • Legal obligation — where we are required to process data to comply with professional or statutory requirements

  • Legitimate interests — where processing is necessary for the legitimate interests of our practice, including maintaining project records and responding to enquiries

  • Consent — where you have provided explicit consent, for example for marketing communications

Your Rights


Under UK GDPR and the Data (Use and Access) Act 2025, you have the following rights:


  • The right to request a copy of the personal data we hold about you

  • The right to request correction of inaccurate or out-of-date personal data

  • The right to request erasure of your personal data where it is no longer necessary to retain it

  • The right to withdraw consent at any time, where consent is the lawful basis for processing

  • The right to data portability, where applicable

  • The right to request restriction of processing where accuracy or processing is disputed

  • The right to object to processing based on legitimate interests, including direct marketing


To exercise any of these rights, please contact us at info@visionanddesign.co.uk. We will respond within one month and may ask you to verify your identity.

Transfer of Data Abroad


We do not routinely transfer personal data outside the UK. Where an international project requires sharing contact details with clients or consultants based outside the UK, we will ensure appropriate safeguards are in place in accordance with UK GDPR.

Automated Decision Making


We do not use any form of automated decision making or profiling in our business.

Changes to This Policy


Any changes we make to this policy will be posted on this page. We encourage you to check back periodically. Where changes are significant, we will notify you by email where appropriate.

How to Make a Complaint


To exercise your rights or raise any queries or complaints, please contact us in the first instance at:


info@visionanddesign.co.uk

Vision + Design Ltd,

The Society Building,

55 Whitfield Street,

London,

W1T 4AH


If your complaint is not resolved to your satisfaction, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):


Website: ico.org.uk

Telephone: 0303 123 1113

Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Cookie Policy


What Are Cookies?


Cookies are small text files downloaded to your device when you visit a website. They allow the site to recognise your device and store certain information about your visit. This page explains what cookies our site uses, how we use them, and how you can control them.


How We Use Cookies


We use cookies to ensure the website functions correctly and, where you have given consent, to understand how visitors use our site so we can improve it. We do not use cookies for advertising purposes.


Strictly Necessary Cookies


These cookies are essential for the website to operate and do not require your consent. They are set by our website platform (Framer) to manage page delivery and session behaviour. Framer session cookies are required for the website to load and function correctly and last for the duration of your browser session only.


Third-Party Cookies


Our contact page includes a Google Maps embed. When loaded, Google may set third-party cookies on your device to enable map display and interaction. These cookies are controlled by Google, not by us. For more information see Google's privacy policy at policies.google.com/privacy. The Google Maps embed will only load after you have given your consent via our cookie banner.


Analytics Cookies


We use Google Analytics to understand how visitors interact with our website. These cookies collect information about pages visited, time spent on the site and how you arrived. This data is used to improve our website and content. Analytics cookies are only set after you have given your consent. Google Analytics uses two cookies: _ga, which distinguishes unique users and lasts for 2 years; and ga*, which maintains session state and also lasts for 2 years. For more information see support.google.com/analytics.


Disabling Cookies


You can prevent cookies being set by adjusting your browser settings. Please be aware that disabling certain cookies may affect the functionality of this and other websites. You can also change your cookie preferences at any time by clicking Cookie Settings in the footer of this page. For more general information on cookies visit allaboutcookies.org.


For Vision + Design Ltd — April 2026