Last Updated: 3 August 2026
1. Introduction
House Plan Direct ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with:
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018
- Privacy and Electronic Communications Regulations (PECR)
- Information Commissioner's Office (ICO) guidance
2. Data Controller
Controller Name: House Plan Direct
Business: Digital floor plans, plan conversions, redraws, and architectural-style plan preparation
Contact Email: web@houseplandirect.com
Postal Address: House Plan Direct, PO Box 686, Exeter, EX2 9PD, United Kingdom
Operating Region: United Kingdom
3. What Personal Data We Collect
3.1 Information You Provide
- Contact Details: Name, email address, phone number, postal address
- Property Information: Property address, property type, room details
- Digital Assets: Property photos, floor plan sketches, existing plans, measurements, and any images you upload
- Order Details: Service requirements, specifications, notes, and preferences
- Payment Information: Payment preferences (PayPal account details handled by PayPal - we do not store card details)
- Communications: Emails, messages, and correspondence with us
3.2 Information We Collect Automatically
- Usage Data: IP address, browser type, device information, pages visited, time spent on pages
- Cookies: As described in our Cookie Policy (see Section 10)
- Analytics Data: Website usage statistics via Google Analytics (when configured)
4. Lawful Basis for Processing
We process your personal data under the following lawful bases:
4.1 Contract (Article 6(1)(b) UK GDPR)
Processing necessary to perform our contract with you, including:
- Processing your order
- Creating and delivering your floor plans
- Communicating about your order
- Processing payments
4.2 Legitimate Interest (Article 6(1)(f) UK GDPR)
Processing necessary for our legitimate business interests:
- Improving our services and website
- Fraud prevention and security
- Marketing to existing customers (with opt-out option)
- Business analytics and performance monitoring
4.3 Legal Obligation (Article 6(1)(c) UK GDPR)
Processing required by law:
- Accounting and tax records (6 years retention)
- Compliance with financial regulations
- Responding to legal requests
4.4 Consent (Article 6(1)(a) UK GDPR)
Processing based on your explicit consent:
- Marketing communications (newsletter)
- Non-essential cookies and tracking
- Testimonials or case studies (if applicable)
5. How We Use Your Personal Data
- To process and fulfil your orders
- To create professional floor plans from your sketches
- To communicate with you about your order and services
- To process payments securely
- To improve our website and services
- To comply with legal and regulatory requirements
- To prevent fraud and ensure website security
- To send service updates (essential communications)
- To send marketing communications (with your consent)
6. Data Sharing and Third Parties
We may share your personal data with trusted third parties who assist us in operating our business:
6.1 Service Providers
- Hosting Provider: For website and data storage (GDPR-compliant hosting)
- Payment Processor: PayPal (for secure payment processing)
- Email Service Provider: For sending order confirmations and communications
- Analytics Provider: Google Analytics (when configured, with IP anonymisation)
6.2 Legal Requirements
We may disclose your data if required by law, court order, or regulatory authority.
6.3 Data Protection Measures
All third parties are carefully selected and required to:
- Comply with UK GDPR and data protection laws
- Process data only on our instructions
- Implement appropriate security measures
- Sign Data Processing Agreements where required
7. International Data Transfers
Your data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK/EEA, we ensure:
- Adequate safeguards are in place (Standard Contractual Clauses)
- The recipient country has an adequacy decision from the UK
- Appropriate security measures are implemented
8. Data Retention Periods
We retain your personal data only for as long as necessary:
| Data Type | Retention Period |
|---|
| Customer contact details | 6 years after last transaction |
| Floor plans and project files | 6 years (or as specified) |
| Uploaded images/sketches | Deleted after project completion or 90 days |
| Financial records | 6 years (legal requirement) |
| Email correspondence | Up to 6 years |
| Marketing consent | Until withdrawn or 2 years inactivity |
| Analytics data | 26 months (Google Analytics default) |
9. Your Data Protection Rights
Under UK GDPR, you have the following rights:
9.1 Right of Access (Article 15)
Request a copy of the personal data we hold about you.
9.2 Right to Rectification (Article 16)
Request correction of inaccurate or incomplete data.
9.3 Right to Erasure (Article 17)
Request deletion of your personal data (subject to legal retention requirements).
9.4 Right to Restriction (Article 18)
Request temporary restriction of processing while disputes are resolved.
9.5 Right to Data Portability (Article 20)
Receive your data in a structured, machine-readable format.
9.6 Right to Object (Article 21)
Object to processing based on legitimate interests or direct marketing.
9.7 Right to Withdraw Consent (Article 7)
Withdraw consent for processing at any time (doesn't affect prior lawful processing).
How to Exercise Your Rights
To exercise any of these rights, please contact us at: web@houseplandirect.com
We will respond within one month. If your request is complex, we may extend this by two months and will notify you.
10. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your website experience. For detailed information, please see our separate Cookie Policy.
Types of Cookies We Use:
- Essential Cookies: Required for website functionality (no consent needed)
- Analytics Cookies: Google Analytics (requires consent)
- Functional Cookies: Remember your preferences
You can manage cookie preferences through your browser settings or our cookie consent banner.
11. Security Measures
We implement appropriate technical and organisational measures to protect your personal data:
- HTTPS Encryption: All data transmitted is encrypted using SSL/TLS
- Secure Hosting: Data stored on secure, UK-based servers with backup systems
- Access Controls: Strict authentication and authorization procedures
- Employee Training: Staff trained in data protection and confidentiality
- Regular Security Audits: Ongoing monitoring and security assessments
- Data Minimisation: We collect only essential data
- Password Protection: Encrypted storage of passwords using industry-standard hashing
12. Data Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will:
- Notify the ICO within 72 hours of becoming aware
- Notify affected individuals without undue delay if there is a high risk
- Provide clear information about the breach and steps being taken
- Offer guidance on protecting yourself from potential harm
13. Children's Privacy
Our services are not intended for children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will delete it promptly.
14. Marketing Communications
With your consent, we may send you marketing communications about:
- New services and features
- Special offers and promotions
- Industry news and tips
Unsubscribe: You can opt out at any time by:
- Clicking the unsubscribe link in any marketing email
- Contacting us at web@houseplandirect.com
- Updating your preferences in your account (if applicable)
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes in law or regulation
- Changes to our services
- Best practice recommendations
The "Last Updated" date at the top of this page shows when this policy was last revised. We will notify you of significant changes via email or a prominent notice on our website.
16. Complaints and Supervisory Authority
If you have concerns about how we handle your personal data, please contact us first at: web@houseplandirect.com
You also have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113
Live Chat: Available on ICO website
Postal Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
17. Contact Us
For any questions about this Privacy Policy or how we handle your personal data, please contact us:
House Plan Direct
Email: web@houseplandirect.com
Postal Address: House Plan Direct, PO Box 686, Exeter, EX2 9PD, United Kingdom
This Privacy Policy is compliant with UK GDPR, Data Protection Act 2018, and ICO guidance as of the date stated above.