Privacy Policy

How Storey collects, uses, and protects personal information when you visit our website or get in touch about a project.

Last updated June 2026

1. Introduction

Storey ("we", "us", or "our") is a contemporary residential architecture studio. We are committed to protecting your personal data and handling it responsibly.

This privacy policy explains how we collect, use, store, and protect personal information when you visit storey.co.uk (the "Website") or contact us about a project. It also sets out your rights under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who is responsible for your data

Storey is the data controller for the personal information described in this policy. If you have any questions about how we handle your data, please contact us using the details in section 12.

3. Information we collect

We may collect and process the following types of personal information:

  • Contact details you provide when enquiring about a project, including your name, email address, project type, location, timeline, and any message you send through our contact form.
  • Communications you send to us directly by email or telephone, and our responses to those enquiries.
  • Technical data collected automatically when you use the Website, such as your IP address, browser type, device information, referring pages, and general usage data.
  • Cookie and similar technology data, where applicable.

For more information about how we use cookies, please see our cookie policy.

4. How we use your information

We use personal information for the following purposes:

  • To respond to enquiries and discuss potential architectural projects.
  • To provide information about our services, studio, and work.
  • To operate, maintain, and improve the Website.
  • To keep records of correspondence and project-related discussions.
  • To comply with legal obligations and protect our legitimate business interests.

5. Lawful bases for processing

Under UK GDPR, we rely on the following lawful bases depending on the circumstances:

  • Consent, where you have given clear permission for us to process your information, for example when submitting our contact form.
  • Legitimate interests, where processing is necessary to respond to enquiries, operate the Website, and develop our practice, provided your rights do not override those interests.
  • Legal obligation, where we need to comply with applicable law.

6. Sharing your information

We do not sell your personal data. We may share information with trusted third parties who help us run the Website and manage enquiries, including:

  • Web3Forms, which processes contact form submissions on our behalf.
  • Hosting and infrastructure providers, including Vercel, which help us deliver the Website securely.
  • Content and image delivery services used to display project and journal material on the Website.

These providers only process personal data according to our instructions and for the purposes described in this policy. We may also disclose information where required by law or to protect our legal rights.

7. Data retention

We keep personal information only for as long as necessary for the purposes described in this policy.

Enquiry and correspondence records are typically retained for up to three years after our last meaningful contact, unless a longer period is required for an active project, legal claim, or regulatory requirement. Technical logs and analytics-related data are retained for shorter periods where possible.

8. Your rights

Under UK data protection law, you have the right to:

  • Request access to the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request erasure of your data in certain circumstances.
  • Object to or restrict certain types of processing.
  • Request transfer of your data to another organisation, where applicable.
  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

9. Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. International transfers

Some of the service providers we use may process data outside the United Kingdom. Where this occurs, we take steps to ensure appropriate safeguards are in place so your information remains protected in line with UK data protection standards.

11. Links to other websites

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their privacy policies before providing any personal information.

12. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically.

13. Contact us

If you have any questions about this privacy policy or how we handle your personal data, please get in touch: