S2ArchViz Privacy Policy

S2ArchViz — Privacy Policy

Effective date: 25 August 2025
Last updated: 25 August 2025
Version 1.0

…………..

Controller: S2ArchViz Studio (trading name of [S2ArchViz])

Contact: hello@s2archviz.com

1) Scope

This Policy explains how we collect, use, share and protect personal data when you visit our website, make an enquiry, or engage us for services (architectural visualization, rendering, animations, virtual tours, product rendering and related services).

2) What data we collect

  • Identity & contact: name, company, role, email, phone, billing address.

  • Project data: project brief, assets you upload or share (text, images, CAD/3D files).

  • Usage & technical: IP address, device/browser info, pages viewed, referral URLs, timestamps, approximate location (country/city).

  • Payment data: payment intent IDs, transaction status, and limited card metadata via Stripe. We do not store full card numbers or CVV.

  • We do not intentionally collect special-category data and ask you not to send such data.

3) How we collect data

  • Directly from you: forms, email, proposals, contracts, file uploads.

  • Automatically: cookies, similar technologies, and analytics (e.g., Google Analytics).

  • From third parties (B2B): referrals, public company info, or business networking platforms where permitted.

4) Lawful bases (GDPR/UK GDPR)

  • Contract performance – to respond to enquiries, provide quotes, deliver services, support.

  • Legitimate interests – to secure our site, prevent fraud/abuse, improve services, B2B communications.

  • Consent – for non-essential cookies/analytics and optional marketing; you can withdraw consent anytime.

  • Legal obligation – accounting, tax, and compliance (sanctions/AML/export control screening).

5) How we use data

  • Provide and manage our services, projects and customer support.

  • Issue proposals/invoices; process payments via Stripe.

  • Communicate about projects, revisions, and service updates.

  • Improve website performance and user experience (analytics).

  • Send optional newsletters/promotions (with easy unsubscribe).

  • Protect security, prevent fraud, enforce our Terms.

6) Cookies & analytics

We use:

  • Strictly necessary cookies (site security, session).

  • Analytics (e.g., Google Analytics) – only with consent in the EEA/UK.

  • You can control cookies via our cookie banner and browser settings.

7) Sharing & disclosures

We do not sell personal data. We share it only with:

  • Service providers / processors (hosting & backup, email, helpdesk, file transfer, analytics, payment processing via Stripe, CDN, accounting). They process data under contracts and only on our instructions.

  • Professional advisors (legal/accounting) under confidentiality.

  • Legal/safety – where required by law or to protect rights and security.

A list of current processor categories is available on request.

8) International transfers

We may transfer data outside your country. Where required, we use Standard Contractual Clauses or equivalent safeguards and assess partner protections.

9) Data retention

We keep data only as long as needed for the purposes below (or longer if required by law):

  • Enquiries & sales discussions: up to 12 months after last contact.

  • Project records & deliverables: 12–36 months after completion (to manage revisions/support).

  • Contracts, invoices & payment records: up to 10 years (accounting/compliance).

  • Server logs & security data: up to 12 months.

We anonymize or securely delete data when no longer needed.

10) Security

We use reasonable technical and organisational measures (encrypted transport, hardened hosting, access controls, backups). No system is 100% secure, but we work to prevent and detect incidents.

11) Your rights

Depending on your location (e.g., EEA/UK), you may have the right to:

  • Access, correct, or delete personal data.

  • Restrict or object to processing (including analytics/marketing).

  • Data portability (copy of your data in a structured format).

  • Withdraw consent (for cookies/marketing) at any time.

  • Lodge a complaint with your local data protection authority.

Requests: hello@s2archviz.com (we may need to verify your identity).

12) Marketing communications

We send marketing only with your consent (or to B2B contacts where permitted). Every message includes an unsubscribe link. You can also email us to opt out.

13) Children

Our services and site are not directed to children under 16 (or the minimum age in your country). We do not knowingly collect children’s data.

14) Client-provided personal data (processor role)

If you provide assets that contain personal data of third parties (e.g., real people in photos), you are the controller and we act as your processor. We will process such data only to deliver the services and on your instructions. A Data Processing Addendum (DPA) is available on request.

15) Compliance & sanctions

We may screen clients and transactions as required by sanctions, anti-money-laundering and export-control laws and may refuse or terminate services where necessary.

16) Changes to this Policy

We may update this Policy from time to time. We will post the new version with a new effective date and, where appropriate, notify you of significant changes.

17) Contact

Questions or requests: hello@s2archviz.com

[S2ArchViz]

…………..

v1.0 – 25 Aug 2025 – Initial release