Privacy Policy

Last updated: 14 July 2026

1. Who We Are

Anthony Munden Architect (AMA) is a registered architectural practice based in Winchester, Hampshire, specialising in residential design including new build houses, extensions, and refurbishments. We operate at www.amarchitect.info.

We are the data controller for the personal data collected through this website, meaning we decide how and why your data is used. This is in line with our obligations under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025 (DUAA).

If you have any questions about this policy or how we handle your data, you can reach us at:

Address: 13 Andover Road North, Winchester, Hampshire

2. What Personal Data We Collect

Contact form

When you get in touch via our website contact form, we collect your name, email address, and the details you include in your message. We use this information to respond to your enquiry.

Analytics

We use Squarespace's built-in analytics to understand how visitors use our website. This includes information such as which pages you visit, how long you spend on the site, and general details about your device and browser. This data is collected in an aggregated form and does not directly identify you.

Cookies

We use cookies on this website. Please see Section 5 for full details.

3. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

  • Responding to enquiries you send via our contact form

  • Discussing and scoping potential architectural projects

  • Providing the architectural services you have engaged us to deliver

  • Managing project communications throughout the design and construction process

  • Keeping records of client work for legal and accounting purposes

  • Analysing how people use our website so we can improve it

4. Our Legal Basis for Processing

Under UK GDPR and the DUAA, we must have a lawful basis for processing your personal data. Here's what we rely on:

  • Legitimate interests — We use this basis for responding to enquiries and using analytics to improve our website. We have assessed that our interest in doing so does not override your rights and freedoms.

  • Contract — Once you become a client, we process your data to fulfil our contractual obligations, including designing and delivering your project through the relevant RIBA stages.

  • Legal obligation — We may retain certain financial and business records to comply with UK law, including HMRC requirements.

  • Consent — We rely on your consent for any non-essential cookies. You can withdraw your consent at any time by clearing your browser cookies and declining them on your next visit.

The DUAA introduced a new category of "recognised legitimate interests" which provides a clearer legal basis for certain types of processing. Where any of our processing falls within these recognised categories, we document this appropriately.

5. Cookies

We use the following types of cookies on this website:

6. Third Parties We Share Data With

We do not sell your personal data to third parties. However, some of the tools we use to run this website involve third parties processing your data on our behalf:

Squarespace — Our website is hosted and built on Squarespace. They process data related to your visit, including contact form submissions and analytics, in line with their own privacy policy: squarespace.com/privacy

We may also share your data if required to do so by law, or to protect the rights, property, or safety of our business, our clients, or others. In the course of delivering architectural services, we may share relevant project information with third parties such as planning authorities, structural engineers, or contractors — but only as necessary to deliver the services you have engaged us to provide.

7. How Long We Keep Your Data

We only hold your data for as long as necessary:

  • Enquiries that don't proceed to a project: We keep your contact details and message for up to 2 years, in case you get back in touch.

  • Client records: We keep records of completed projects and related communications for 6 years, in line with standard UK business practice and our legal obligations. Architectural projects may warrant longer retention periods depending on the nature and complexity of the work.

  • Squarespace analytics data: Retained in line with Squarespace's default data retention settings.

  • Cookies: Session cookies are deleted when you close your browser. Persistent cookies expire in line with the timescales set by each provider.

8. Your Rights

Under UK GDPR and the DUAA, you have the following rights in relation to your personal data:

  • Right of access — You can request a copy of the personal data we hold about you.

  • Right to rectification — You can ask us to correct any inaccurate or incomplete data.

  • Right to erasure — You can ask us to delete your personal data in certain circumstances.

  • Right to restriction — You can ask us to limit how we use your data while a dispute is resolved.

  • Right to data portability — You can ask us to provide your data in a structured, commonly used format.

  • Right to object — You can object to processing based on legitimate interests.

  • Rights related to automated decision-making — We do not make any automated decisions about you that would have a legal or significant effect. No profiling is used to make such decisions.

  • Right to withdraw consent — Where we rely on consent, you can withdraw it at any time.

  • Right to complain to us directly — The DUAA introduced a new right for you to raise a data protection complaint directly with us as the data controller. We are required to acknowledge and investigate your complaint without undue delay and keep you informed of the outcome. To make a complaint, please email us with the subject line "Data Protection Complaint". We will acknowledge your complaint within 30 days.

  • Right to complain to the ICO — If you are not satisfied with how we handle your complaint, or you prefer to go directly to the regulator, you can contact the Information Commissioner's Office (ICO):

    Website: ico.org.uk
    Phone: 0303 123 1113

We will respond to any data subject rights request within one month of receiving it. We may need to verify your identity before we can action your request, and in some cases we may need to pause the response period while we gather the information needed. We will always let you know if this is the case.

9. Data Security

We take the security of your personal data seriously. Our website is hosted on Squarespace, which provides industry-standard security measures including HTTPS encryption. We limit access to your data to those who genuinely need it as part of delivering our services.

That said, no method of transmitting data over the internet is completely secure. While we do our best to protect your personal data, we cannot guarantee its absolute security.

If you suspect a data breach involving your personal information, please contact us as soon as possible.

10. International Data Transfers

Squarespace may transfer and process some data outside the UK. Where this happens, appropriate safeguards are in place, such as standard contractual clauses.

The DUAA updated the framework for international data transfers, replacing the previous "essentially equivalent" test with a new data protection test. This ensures that where data is transferred internationally, the level of protection is not materially lower than under UK GDPR. The European Commission renewed the UK's adequacy decision in December 2025, confirming that the UK continues to provide an adequate level of data protection for transfers from the EU.

11. Children's Privacy

Our services are aimed at adult homeowners and developers. We do not knowingly collect personal data from children under the age of 13. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in how we operate or in the law. When we do, we will update the date at the top of this page. We encourage you to check back occasionally, especially if you are an existing client.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please get in touch:

Anthony Munden Architect
13 Andover Road North
Winchester
Hampshire
Website: www.amarchitect.info