Privacy Policy

1. Data Controller

Kosma Rybak Ltd ("we", "us", or "our") is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Registered Address: 124 City Road, London, EC1V 2NX
Contact Email: m@kosmarybak.com
Telephone: 07719700256

2. Information We Collect

We only collect personal information that you directly provide to us via our online contact enquiry form, email correspondence, direct telephone enquiries, or social media platforms (including Meta / Facebook Lead forms). This includes:

• Full Name
• Contact details (Email address, telephone number)
• Site / Property Postcode or Address
• Project requirements, design preferences, and estimated construction budget

3. How We Use Your Data & Legal Basis

We process your data under the following lawful bases:

• Contractual & Pre-Contractual Steps: To prepare architectural proposals, evaluate site feasibility, conduct consultations, and deliver contracted architectural and Principal Designer services.
• Legitimate Interests: To respond promptly to enquiries and manage ongoing client communications.
• Legal Compliance: To comply with statutory statutory planning procedures, Building Regulations submissions, ARB professional regulations, and statutory accounting requirements.

4. Third Parties & Data Sharing

We never sell or rent your personal information to third parties. We only share necessary project information with relevant third parties strictly for the purpose of executing your project, including:

• Local Planning Authorities (for Planning and Lawful Development Certificate applications).
• Approved Building Control Inspectors / Local Authority Building Control.
• Appointed third-party engineering or surveying consultants (with your prior agreement).
• Secure technical communication providers (e.g. Web3Forms form processing, hosting infrastructure).

5. Data Retention

We retain your personal data and project records only for as long as necessary to fulfill the purposes for which they were collected, including statutory architectural record-keeping and professional indemnity insurance liability requirements (typically up to 6 or 12 years following project completion).

6. Your Statutory Rights

Under UK GDPR, you have the right to request access to, rectification of, or erasure of your personal data, as well as the right to restrict or object to processing. To exercise any of these rights, please contact us at m@kosmarybak.com.

You also have the statutory right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.