Last updated: September 2026
Brave-rain is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we comply with these regulations.
Brave-rain acts as the data controller for personal information collected through this website and in the course of providing architectural services. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently.
We process personal data under the following legal bases:
You have the following rights regarding your personal data:
You can request a copy of the personal data we hold about you, known as a subject access request.
You can ask us to correct inaccurate or incomplete personal data.
Also known as the "right to be forgotten," you can request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purpose it was collected.
You can request that we restrict processing of your personal data in specific situations, such as when you contest its accuracy.
You can request to receive your personal data in a structured, commonly used format and have it transferred to another organization where technically feasible.
You can object to processing based on legitimate interests or for direct marketing purposes.
We do not use automated decision-making or profiling on our website.
To exercise any of these rights, please contact us at [email protected] with the following information:
We will respond to your request within one month. In complex cases, this may be extended by up to two additional months, and we will inform you if this is necessary.
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, or damage. These measures include:
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also notify affected individuals without undue delay.
We do not routinely transfer personal data outside the United Kingdom. If such transfers become necessary, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
For questions about data protection or to exercise your rights, please contact us at [email protected].