Privacy Policy & Data Protection Disclosures

1. Data Controller Identification

This website (poppiowonderfl.cfd) is operated by Poppiowonderfl Interior Atelier Ltd, a registered company in England and Wales under Company Registration Number 14892014, having its registered studio office at 24 Belgrave Crescent, Studio 4B, London, SW1X 8PX, United Kingdom. We act as the Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Personal Data We Collect

We adhere to data minimization principles. We only collect personal information that you voluntarily submit through our consultation inquiry forms, design audit requests, or direct correspondence to our studio inbox:

• Identity & Contact Details: Full name, professional title, email address, contact telephone number, and residential project city.
• Architectural Project Specifications: Room dimensions, floor plans, aesthetic preferences, and budget bands submitted in inquiry forms.
• Technical & Telemetry Data: Truncated IP addresses, browser types, screen viewport dimensions, and navigational timestamps collected through essential server logs.

3. Lawful Basis for Processing

Under UK GDPR Article 6, our processing operations rest upon the following legal bases:

• Consent (Art. 6(1)(a)): Granted when you explicitly agree to voluntary analytics cookies or subscribe to design publications.
• Contractual Performance (Art. 6(1)(b)): Necessary to evaluate, quote, and fulfill architectural consultations and interior design commissions.
• Legitimate Interests (Art. 6(1)(f)): Necessary to maintain web server stability, protect against malicious traffic, and optimize design resource clarity.

4. Cookies & Tracking Technologies

We use strictly necessary technical cookies to store consent status and maintain session security. Non-essential aggregate analytics are loaded only after your explicit affirmative consent via our cookie banner. For full technical details and lifespans, review our dedicated Cookie Policy.

5. Third-Party Processors & Hosting Infrastructure

We do not sell, rent, or trade your personal data. We utilize reputable infrastructure providers operating under strict Data Processing Agreements:

• Cloud hosting providers maintaining ISO/IEC 27001 certified data center facilities within the UK and European Economic Area.
• Secure enterprise transactional email relays equipped with TLS 1.3 encryption for delivering consultation responses.

6. International Data Transfers

Where technical sub-processors operate outside the United Kingdom or EEA, transfers occur solely under UK International Data Transfer Agreements (IDTAs) or European Commission Standard Contractual Clauses (SCCs) ensuring an adequate level of data protection.

7. Data Retention Schedule

Consultation inquiries that do not progress to an active design commission are permanently deleted after twenty-four (24) months. Records relating to contracted architectural projects are retained for seven (7) years to comply with statutory accounting and professional liability obligations under UK law.

8. Your Statutory Rights (GDPR & CCPA/CPRA)

Subject to statutory exemptions, you hold enforceable rights regarding your information:

• Right of Access: Request a complete copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of records when processing grounds lapse.
• Right to Restriction & Objection: Object to processing based on legitimate interests or request temporary suspension.
• California Consumer Privacy Act (CCPA): California residents may verify that Poppiowonderfl does not "sell" or "share" personal information as defined by statutory guidelines.

9. Data Protection Officer & Supervisory Authority Contact

To exercise your privacy rights or submit queries regarding our data governance, contact our appointed Data Protection Lead at:

You also retain the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.