Privacy Policy
How we handle personal data at DrawingsDirect. Last updated 25 July 2026.
Who we are
DrawingsDirect prepares planning and building-regulation drawings for homes across London. For the purposes of UK data protection law we are the data controller for the personal data described below. Contact us about anything on this page at [email protected] or 020 7864 7245. Written correspondence, including subject access requests, can be posted to 71–75 Shelton Street, London WC2H 9JQ.
What we collect
When you make an enquiry. Your name, email address, phone number, the property postcode, the project type and anything you write in the message field. We collect this because it is what a quote requires — we cannot price a drawing package without knowing where the property is and what you want to build.
When you become a client. The full property address, survey measurements and photographs, the drawings we produce, correspondence about the project, and any documents you upload — deeds, previous decision notices, lease extracts, structural information.
When you use the client portal. Your email address, and sign-in records. The portal authenticates by emailed magic link, so we do not hold a password for you.
Automatically, when you browse the site. Standard server request logs (IP address, timestamp, page requested, browser user agent), retained short-term for security and diagnostics.
We do not knowingly collect special-category data, and we do not ask for payment card details through this website.
Why we are allowed to hold it
Contract. Once you instruct us, processing your project data is necessary to perform the contract between us — we cannot draw or submit an application without it.
Legitimate interests. Responding to an enquiry you sent us, protecting the site from abuse, and keeping business records. We have considered your interests and rights and believe you would reasonably expect us to use your details to reply to you.
Legal obligation. Retaining records where accounting, tax or professional-indemnity requirements demand it.
Consent. Only where we ask for it explicitly — for example if you opt in to marketing email. You can withdraw consent at any time without affecting anything done before you withdrew it.
Who else sees it
We do not sell personal data and we do not share it for advertising. We use a small number of processors to run the service, each bound to process data only on our instructions:
Hosting — the site and its database run on dedicated infrastructure in the EU. Email delivery — Resend, for enquiry notifications, portal sign-in links and project correspondence. Document storage — Cloudflare R2, for drawings and files in the client portal, in a private bucket that is never publicly listable; every download is a short-lived signed link issued only after an access check.
Where your project requires it, drawings and supporting information are submitted to your local planning authority or building control body. Planning applications are, by law, part of a public register — the drawings and application form appear on the council’s public planning portal. That is a statutory consequence of applying, not a choice we make, and we will flag it before submitting.
We may also disclose data where we are legally required to, or to establish or defend legal claims.
How long we keep it
Enquiries that do not become projects — up to 24 months, then deleted, in case you come back to a quote.
Client project records and drawings — retained for the life of the professional-indemnity liability period, because a defect claim can be brought years after a building is finished and we need the record to answer it.
Accounting records — as required by HMRC.
Server logs — short-term only.
Your rights
Under UK GDPR you can ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, ask us to restrict or object to how we use it, ask for it in a portable format, and withdraw any consent you have given. Email [email protected] and we will respond within one month.
Two honest limits. We cannot delete drawings already submitted to a council — they are on a public statutory register and outside our control. And we may need to keep a minimum record of a completed project for as long as we could be held liable for it, even if you ask us to erase everything else.
If you think we have handled your data badly, tell us first — we would rather fix it. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority.
Cookies
This site does not run third-party advertising or cross-site tracking cookies. We use only what is strictly necessary to make the site work — a session cookie for the client portal once you sign in, and a locally stored value that keeps the lead form consistent between page loads. Nothing that requires a consent banner under PECR.
Changes
If this policy changes materially we will update the date at the top of the page. See also our terms of service, or contact us with any question about it.