Privacy policy

Andreas Krause Architects Ltd is committed to protecting and respecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Andreas Krause Architects Ltd, trading as Krause Architects, is the data controller for the personal data described in this policy. We are registered in England and Wales, company number 07005329, at Unit A42, Jack’s Place, 6 Corbet Place, London E1 6NN. We are registered with the Information Commissioner’s Office under reference ZA554082.

You can reach us about anything in this policy at contact@krausearchitects.com or on +44 (0)20 3397 1070.

What we process, and why we are allowed to

We process personal data in connection with the delivery of architectural services. In practice that means contact and project information for clients, consultants, contractors, suppliers and people who enquire about our work. We collect personal data only where it is necessary for these purposes.

Our lawful bases are performance of a contract, for client and project data we need in order to carry out an appointment or to take steps before entering into one; legitimate interests, for contact details of consultants, contractors and suppliers and for people who approach us about a project, so that we can run a professional practice and respond, balanced against your own interests and subject to your right to object; and legal obligation, for records we are required to keep, including statutory, tax and building safety records.

Who we share it with

We share personal data with consultants, contractors and other professionals where it is needed to deliver a project, and with the IT providers who host our systems. Every provider that handles personal data on our behalf is bound by a written agreement requiring appropriate safeguards. We do not sell personal data and we do not share it for marketing.

Where it is held, and transfers outside the UK

Data is held in managed cloud environments, currently Microsoft 365 and Dropbox Business, with access controls, encryption and secure authentication in place. Access is limited to authorised personnel.

Some of our providers are based outside the United Kingdom. Where personal data is transferred outside the UK, it is protected by a recognised legal mechanism, such as UK adequacy regulations, the International Data Transfer Agreement, or the UK Addendum to the European Commission standard contractual clauses.

How long we keep it

We keep personal data only for as long as it is needed for the purpose it was collected for, or for as long as we are required to keep it to meet a legal, statutory or professional obligation, and then we delete it. Project records are kept for the period during which a claim may be brought and our professional indemnity insurance requires them to be available.

Your rights

You have the right to ask for a copy of the personal data we hold about you, to have inaccurate data corrected, to ask us to delete it where that applies, to ask us to restrict how we use it, to object to processing we carry out on the basis of legitimate interests, to ask for your data in a portable form where the processing is based on consent or on a contract and is carried out by automated means, and to withdraw consent at any time where we rely on consent.

To exercise any of these, write to contact@krausearchitects.com. We will respond within one month.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk/make-a-complaint or on 0303 123 1113.

We maintain procedures for identifying and responding to data breaches and will notify the ICO and affected individuals where required.

This website

This website sets no cookies and stores nothing on your device. There are no forms: the contact page is a link to our email address.

We use Cloudflare Web Analytics to count page views and see which pages are read. It uses no cookies, stores nothing on your device, does not fingerprint your browser and does not follow you to other websites. It cannot identify you.

The typeface is served from this website rather than from a third party. The contact page embeds a map from Google, which means your browser contacts Google when you open that page, and Google’s own privacy terms apply to that request. No other page contacts anyone but us and Cloudflare.

Artificial intelligence

Some of the written content and some images on this website may have been generated or edited with the assistance of artificial intelligence.

Changes to this policy

We review this policy periodically. This version was published on 9 September 2026.