Privacy notice

How DraftDesk collects, uses, and protects personal data.

[REVIEW: legal copy required - full privacy notice, reviewed by a UK GDPR adviser]

Who we are

DraftDesk is practice-management software for UK architecture firms.

[REVIEW: data controller identity, registered address, and ICO registration number]

What we collect

Account details, the practice and client/enquiry records you create, and technical data needed to operate the service.

[REVIEW: confirm the full categories of personal data processed]

Lawful basis for processing

We process personal data under UK GDPR Article 6(1)(b) (performance of a contract - providing the service to your practice) and Article 6(1)(f) (legitimate interests - securing and improving the service). Where neither applies, we rely on consent.

[REVIEW: confirm the lawful bases above with a UK GDPR adviser and tailor to actual processing]

Sub-processors

We use third parties to operate the service. See the sub-processor register.

Data retention & your rights

You can request deletion of your account and data. Retention periods and the full set of data-subject rights (access, rectification, erasure, portability, objection) are set out below.

[REVIEW: retention periods per data category, and the rights-request process + contact]

Contact

[REVIEW: data-protection contact email / postal address]

[REVIEW: last-updated date]