Privacy Notice

How we protect your data and uphold your trust. Our commitment to clarity, security, and the respectful handling of personal information.

1. Purpose

Impey Studio is committed to protecting the privacy and security of any personal data (defined in Section 3 below) it handles.

When we mention “Impey Studio”, “we”, “us” or “our” in this Privacy Notice, we are referring to the relevant entity within the Impey Studio structure with which you have had dealings.

This Privacy Notice describes how we collect and use personal data about visitors to our website, clients and potential clients, third-party consultants, and any other individuals whose data we may collect, in accordance with applicable data protection laws. Past, present, and prospective employees, workers, and contractors should refer to our separate employee and recruitment privacy notices.

Impey Studio is a “data controller”, which means we are responsible for deciding how we hold and use your personal data. We may update this Notice at any time.

2. Data Protection Principles

We comply with applicable data protection laws. Personal data must be:

  • Used lawfully, fairly, and transparently

  • Collected for specific, clear purposes and not used incompatibly with those purposes

  • Relevant and limited to what is necessary

  • Accurate and kept up to date

  • Kept only as long as necessary

  • Secured appropriately

3. The Kind of Information We Hold About You

“Personal data” means any information from which a person can be identified. It excludes anonymous data.

We may collect and use:

  • Identity Data: name, country of residence, company, job title

  • Contact Data: address, email, phone numbers

  • Professional Data: CVs, qualifications, current salary, right to work documentation

  • Usage Data: website interaction information

  • Technical Data: IP address, browser, operating system, login and device information

  • Marketing and Communication Data: preferences for communications and events

In limited circumstances, we may also collect if shared with us:

  • Copy of passport or proof of address

  • Special Category Data (sensitive personal data): race, ethnicity, religious beliefs, health data, criminal records

4. How We Collect Personal Data

We may collect personal data:

  • Via cookies on our website (see Section 12)

  • Automatically through IT systems

  • Directly from you, e.g. through forms, emails, phone calls, or project engagement

  • From third parties, such as consultants' CVs provided by employers for bids or project assessments

5. How We Use Your Information

We only use your personal data when the law permits. This may include:

  • To perform a contract with you or take steps at your request

  • To comply with legal obligations

  • For our legitimate interests in operating an international design practice

Rarely, we may use your data:

  • To protect your or another’s interests

  • For matters of public interest

6. Special Category Personal Data

We will only process sensitive personal data when:

  • You provide explicit consent

  • Required by law or public interest

  • Necessary for legal claims or health-related purposes

  • You have made the information public

We will notify you if this is the case and obtain consent where needed.

7. Specific Uses of Personal Data

Purpose

Website performance and analytics

Type of Data

We don't collect any infomation

Lawful Basis

Legitimate interests (site improvement and business development)

Purpose

Marketing newsletters

Type of Data

Identity, Contact, Marketing

Lawful Basis

Legitimate interests (marketing our services)

Purpose

Event invitations

Type of Data

Identity, Contact, Marketing

Lawful Basis

Legitimate interests (business development)

Purpose

Studio access and security

Type of Data

Identity, Contact, Health

Lawful Basis

Legitimate interests (studio security and safety)

Purpose

Website administration

Type of Data

Identity, Contact, Technical

Lawful Basis

Legitimate interests (IT and business operations)

Purpose

New business enquiries

Type of Data

Identity, Contact

Lawful Basis

Legitimate interests (business development)

Purpose

Working relationship and project collaboration

Type of Data

Identity, Contact, Professional Information

Lawful Basis

Contract performance and legitimate interests (project delivery)

Purpose

Due diligence checks

Type of Data

Identity, Professional Information

Lawful Basis

Legitimate interests (compliance and risk management)

8. Change of Purpose

We will only use your personal data for the purpose collected, unless reasonably compatible with a new purpose.

To unsubscribe from newsletters or event invites, email us at [insert email] with “unsubscribe” in the subject line.

We may process data without your consent where permitted by law.

9. Data Sharing

We may share your personal data with:

  • Professional advisors (e.g. legal, accounting)

  • Service providers (e.g. hosting, translation)

  • Auditors or regulators, where required

  • Clients or partners, for project-specific needs (e.g. consultant CVs)

As an international practice, we may share data across Impey Studio entities for travel, collaboration, or event purposes.

9.1 Third-Party Security

All third-party providers must comply with our data security standards and process your data only as instructed by us.

9.2 International Transfers

If we transfer your data outside the UK, we do so in compliance with data protection law, using standard contractual clauses or other safeguards. You may request further details from our Data Protection Manager.

10. Security

We secure your data on protected servers. While transmission over the internet is never entirely secure, we take strong measures to prevent unauthorised access, loss, or misuse.

Access is limited to those with a business need, under strict confidentiality obligations.

11. Cookies

Please refer to our separate Cookies Policy for information on how we use cookies.

12. Accuracy

We aim to keep your data accurate and current. Please inform us of any changes.

13. Retention

We retain data only as long as necessary for its purpose, or to meet legal, accounting, or regulatory requirements.

14. Your Rights

You may request to:

  • Access your personal data (“data subject access request”)

  • Correct incomplete or inaccurate data

  • Erase your data

  • Restrict or object to processing

  • Transfer your data to another party

Contact our Data Protection Manager for any of these actions.

14.1 No Fee Required

Requests are free unless clearly excessive or unfounded.

14.2 Identity Verification

We may request ID verification to confirm your rights over the data.

14.3 Withdrawing Consent

Where processing is based on consent, you may withdraw it at any time.

15. Contact

For questions or further information, please contact:

Data Protection Manager
Impey Studio
info@impey.studio
+(971)04 824 97 55

16. Changes to This Notice

We may update this Privacy Notice periodically. We will notify you of significant changes via our website or other channels.