Privacy notice.

Information you submit

The project enquiry form collects the contact details and project information you provide, including uploaded plans, photographs and dimensions. The purpose is to review, respond to and, where agreed, administer your remote structural engineering enquiry or service order.

Secure client portal

Each new enquiry receives a project reference and a private access code. The access code itself is not stored in readable form by the application. Temporary portal sessions are used so you can review project status, receive quotations, exchange messages, upload additional documents and download engineering deliverables. Keep your access code private.

Project files

Uploaded project files are stored in private object storage and are served through authenticated project or administrator routes. They are not intended to be publicly accessible. Do not submit information that is not necessary for the engineering enquiry.

Chat assistant

The project assistant stores the messages sent through the chat so enquiries can be reviewed. If you voluntarily include contact details in the conversation, those details may be associated with the chat session. The assistant is used for project intake and does not issue engineering design approval.

Payments and email

If online card payment is enabled, payment is initiated with the configured external payment provider. The application stores payment status and provider references but is not designed to store card numbers. If email delivery is enabled, project acknowledgements, access codes, quotations and project updates may be sent through the configured email provider.

Retention and rights

Configure production retention periods to reflect professional, insurance, contractual and legal obligations. Customers should be given a working route to request access, correction or deletion where applicable. Contact jbarrera@archiproject.uk for privacy enquiries.

Important deployment step

Before publishing, update this notice with the final legal identity and address of the data controller, lawful bases, retention periods, payment and email processors actually used, any AI subprocessors enabled, international transfer information where relevant, and the final cookie/analytics configuration.