Privacy Policy

1. Data Controller Identification

Bundlesbrmsy Design Studio Ltd. ("we", "us", or "our"), incorporated in England and Wales under Company Registration Number 14892014, with its registered studio office at 44 Stonecutter Way, Suite 3B, Bath, BA1 2LR, United Kingdom, serves as the designated Data Controller regarding personal data gathered across bundlesbrmsy.courses.

For inquiries regarding data retention, individual rights execution, or supervisory authority escalation, our Data Protection Officer may be contacted via email at [email protected].

2. Categories of Information Collected

We restrict data collection to relevant, non-excessive technical and professional details necessary to provide architectural guides and process direct design inquiries:

• Direct Inquiry Data: Full name, professional title, contact email address, telephone numbers, and architectural project details submitted via our contact portal.
• Technical System Telemetry: Anonymized Internet Protocol (IP) address fragments, browser engine identification, viewport dimensions, referral origins, and session timestamps.
• Consent State Records: Cryptographic or client-side storage tokens logging your acceptance or rejection of functional and analytical browser cookies.

3. Lawful Basis for Data Processing

In adherence to the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, we process your information under explicit legal bases:

• Legitimate Interests (Article 6(1)(f)): Delivering responsive website performance, defending against brute-force denial-of-service attempts, and analyzing aggregated readership patterns to refine editorial publications.
• Consent (Article 6(1)(a)): Voluntarily provided when you submit inquiry forms or activate non-essential analytical cookies via our preference manager.
• Pre-Contractual Measures (Article 6(1)(b)): Reviewing project dimensions and architectural briefs at your express request prior to entering formal studio agreements.

4. Third-Party Processors & International Transfers

We do not broker, rent, or trade your personal information. Data transmission is limited to vetted cloud hosting providers, transactional mailing nodes, and security firewall processors maintaining equivalent data protection guarantees under Standard Contractual Clauses (SCCs) or UK International Data Transfer Agreements (IDTAs).

5. Data Retention Schedules

Project inquiry transmissions are retained in active client communication archives for twenty-four (24) months following last correspondence, ensuring continuity should project construction timelines defer. Technical server logging records are truncated and purged after ninety (90) rolling calendar days.

6. Individual Data Subject Rights

Under European and UK data protection frameworks, you maintain the following actionable rights regarding your personal information:

• Right of Access: Request complete verification and copy of stored personal records.
• Right to Rectification: Update incomplete, outdated, or inaccurate personal records.
• Right to Erasure ("Right to be Forgotten"): Demand immediate deletion where records are no longer required for legitimate or contractual reasons.
• Right to Restrict or Object: Restrict processing activities during unresolved dispute investigations.

To exercise any statutory right, submit a signed request to [email protected]. Responses are issued within thirty (30) days without charge.