Data Controller: Architecture Social Limited (Company No. 10430707) Address: WeWork Moor Place, 1 Fore St Ave, London EC2Y 9DT Data Protection Lead: Stephen Drew, Founder Contact: support@architecturesocial.com ICO Registration: Architecture Social is registered with the ICO Last Updated: May 2026
Architecture Social is a specialist recruitment consultancy serving the architecture, design, and built environment sector. We collect and process personal data about candidates (people looking for roles or who we have identified as potential candidates) and clients (employers who use our services to find talent). This notice explains what data we collect, why, how long we keep it, and what rights you have.
We collect data directly from you (when you contact us, send a CV, register on our website, or engage us to fill a role). We also collect data from publicly available sources such as LinkedIn profiles, company websites, and professional directories. Where we source your data from a third party or public source, we will tell you at first contact.
When you speak to us by telephone, we record and transcribe the call so that we keep accurate notes of what was discussed and agreed. You will hear a short announcement before you are connected to a member of our team, and if you would prefer not to be recorded you can tell us at the start of the call. A recording or transcript may include any information you choose to share during the call.
| Purpose | Lawful Basis | Applies To |
|---|---|---|
| Providing recruitment services (matching candidates to roles, arranging interviews, facilitating placements) | Legitimate interest / contract (pre-contractual steps at your request) | Candidates and clients |
| Submitting your CV or details to a client | Consent (we always ask before submitting you) | Candidates |
| Recording and transcribing telephone calls, so we keep accurate notes of what was discussed and agreed | Legitimate interest | Candidates and clients |
| Retaining your data for future opportunities | Legitimate interest (see Section 4) | Candidates |
| Maintaining client relationship and commercial records | Legitimate interest / contract | Clients |
| Sending you information about roles or market insights | Consent or soft opt-in (PECR) | Candidates and clients |
| Complying with legal obligations | Legal obligation | Both |
We operate in a specialist niche. Architecture careers span decades. A candidate we speak to as a Part I Architectural Assistant may, ten years later, be a Practice Director. A client relationship that goes quiet for years can restart overnight. For these reasons, we retain candidate, client, and placement data on an ongoing basis under the lawful basis of legitimate interest.
This retention is supported by a documented Legitimate Interest Assessment (LIA) which we review annually.
| Data | Retention | Basis |
|---|---|---|
| Candidate data | Ongoing | Legitimate interest |
| Client records and commercial terms | Ongoing | Legitimate interest |
| Placement records | Ongoing | Legitimate interest |
| Call recordings and transcripts | 12 months from the date of the call | Legitimate interest |
| Website analytics (cookies) | See cookie policy | Consent |
Under UK GDPR, you have the following rights:
To exercise any of these rights, contact us at support@architecturesocial.com. We will respond within one month.
We share your details with prospective employers (our clients) only with your explicit consent. We will always tell you which client we are submitting you to before we do so. We never share your current employer’s name with anyone.
We use third-party service providers who process data on our behalf, including our CRM/ATS system, our website hosting provider, our email platform, and our telephone call recording and transcription provider. These providers are bound by data processing agreements and can only use your data for the purposes we instruct. We do not sell your data to anyone.
Some of our service providers are based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) as required by UK GDPR.
We take the security of your data seriously. We use encryption, access controls, secure password management, and multi-factor authentication. Our full security measures are detailed in our internal Information Security and Data Protection Policy. If you suspect a data security issue involving your data, contact us immediately at support@architecturesocial.com.
If you are unhappy with how we handle your data, please contact us first at support@architecturesocial.com and we will do our best to resolve the issue. If you remain unsatisfied, you have the right to complain to the Information Commissioner’s Office (ICO):
We may update this privacy notice from time to time. Any significant changes will be communicated via our website. The date at the top of this document shows when it was last updated.
| Version | Date | Author | Changes |
|---|---|---|---|
| 1.0 | Jul 2025 | Architecture Social | Original Privacy Policy – Customers (12 pages). |
| 2.0 | March 2026 | Architecture Social | CRITICAL: Corrected retention periods from arbitrary 6-year limits to ongoing retention under legitimate interest (aligned with Information Security Policy and LIA). Removed false DPO reference (Data Protection Lead is the Founder). Added Do Not Contact suppression list for erasure requests. Added absolute marketing opt-out right. Added lawful bases table. Added international transfers. Streamlined from 12 pages. |
| 2.1 | May 2026 | Architecture Social | Added call recording and transcription disclosure (Sections 2.1, 2.2, 2.3 and 3.0). Added call recording retention period of 12 months (Section 4.2). Added call recording and transcription provider to service providers (Section 6.2). Supported by a separate Legitimate Interest Assessment for call recording. |
Architecture Social Limited | WeWork Moor Place, 1 Fore St Ave, London EC2Y 9DT hello@architecturesocial.com | +44(0)20 7770 9572