Privacy Policy
Ankersen Drake Home Organisation ("the Company," "we", "our", or "us") is committed to protecting the privacy and personal data of our clients (“the Client”, "you" or "your"). This privacy policy explains how we collect, use, store, and protect your personal data in compliance with the UK General Data Protection Regulation (GDPR) and related data protection laws.
This Privacy Policy outlines our general data handling practices. For information specific to how your data is processed as part of a Service Agreement, please refer to your client contract.
1. Data We Collect
We may collect the following categories of personal data:
Contact Information: Name, email address, phone number, and postal address.
Service Information: Details about the services you request, purchase, or receive.
Financial Information: Payment details for invoicing and transactions (note: sensitive payment details are processed securely by third-party providers and not stored by us unless required for billing records).
Communication Data: Records of interactions with you, including emails, phone calls, and other correspondence.
We also collect data in the form of photography and videography. Please see Section 9 for details regarding this type of data collection.
We do not knowingly collect data from individuals under the age of 18 without explicit parental consent.
2. How We Use Your Data
We collect and process your personal data for the following purposes:
To communicate with you regarding inquiries, bookings, or updates.
To deliver the services you have requested or purchased.
To issue invoices, process payments, and manage accounts.
To comply with legal and regulatory obligations, such as tax and accounting requirements.
To improve our services by using aggregated, anonymised data for internal analysis.
For clients under a service agreement, specific data processing practices are detailed in your contract.
3. Lawful Bases for Processing
We process personal data under the following lawful bases as defined by GDPR:
Contractual Necessity: When processing is required to perform our agreement with you or take steps at your request prior to entering into an agreement.
Legal Obligation: When processing is necessary to comply with applicable laws and regulations.
Legitimate Interests: When processing is necessary for our legitimate interests, such as delivering quality services or maintaining business operations, provided these do not override your rights and freedoms.
4. Data Sharing
We will only share your personal data with third parties in the following circumstances:
Service Providers: Trusted subcontractors or vendors who assist in delivering our services (e.g., logistics providers, payment processors). These parties are contractually obligated to protect your data and comply with GDPR.
Legal Requirements: When disclosure is required by law, court order, or regulatory authority.
Client Consent: With your explicit consent, when necessary, for purposes outside the scope of this policy.
We will never sell, rent, or trade your personal data to third parties.
5. Data Storage and Security
We take appropriate technical and organisational measures to safeguard your personal data:
Storage: Personal data is stored and encrypted on secure, password-protected servers and is protected against unauthorised access, loss, or misuse. Physical security measures are in place for any hard copies of this data.
Access: Only authorised personnel with a legitimate business need have access to your data.
Monitoring: Regular audits and security reviews are conducted to maintain data protection standards.
Third-Party Systems: Any third-party tools or platforms used to store or process your data are vetted for GDPR compliance.
Despite these measures, no method of transmission or storage is completely secure. We cannot guarantee absolute security but are committed to maintaining high standards of protection.
Data Breach Notification: The Company will notify the Client without undue delay if a breach poses a high risk to their rights or freedoms and report the breach to the Information Commissioner’s Office (ICO) within 72 hours, as required under GDPR.
6. Data Retention
We retain personal data only as long as necessary to:
Fulfil the purposes outlined in this policy.
Comply with legal and regulatory obligations (e.g., retaining tax records for six years).
For retention practices related to contracted services, refer to your client agreement. After the relevant retention period, your data will be securely deleted or anonymised unless further retention is required for ongoing legal obligations.
7. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Access: To request a copy of the personal data we hold about you.
Correction: To request corrections to inaccurate or incomplete data.
Deletion ("Right to be Forgotten"): To request the deletion of your data at any time, subject to legal and regulatory requirements. This is inclusive of photography and videography.
Restriction: To request the restriction of data processing in certain circumstances.
Objection: To object to processing based on legitimate interests or direct marketing.
Data Portability: To request the transfer of your data to another organisation.
To exercise any of these rights, please contact us using the details provided in Section 8. We will respond to all requests within one month, as required by GDPR.
8. Confidentiality Agreements
If the Client wishes for the Company to sign a Confidentiality Agreement, this must be emailed to the Company and agreed upon ahead of undertaking any contractual agreements with the Client.
9. Photography, Videography, and Marketing Usage
Photography and Videography
The Company may photograph and video the project at all stages, including upon completion.
Opting Out of Photography and Videography
If the Client does not wish for project photos and/or videos to be taken, they must notify the Company in writing prior to the commencement of the project.
Usage of Photos and VideosThese photos and videos may be used by the Company for various business purposes, including but not limited to:
Press and publications
Online content and social media
Marketing and advertising
Print materials
Opting Out of Marketing Use
If the Client does not wish for project photos and/or videos to be used for marketing purposes, they must notify the Company in writing prior to the commencement of the project.
Client AnonymityMarketing and social media usage of project photos will not identify Clients unless explicitly agreed otherwise.
Client-Generated ContentIf the Client documents the project and releases it publicly, the Company must be credited appropriately.
Retention and Deletion:
Photos and videos may be retained indefinitely for use on the Company’s website, social media, marketing, and promotional materials, as these materials are necessary to demonstrate the Company’s work.
The Client retains the right to withdraw their consent for the use of these materials at any time by notifying the Company in writing. Upon receiving such a request, the Company will cease using the relevant materials and remove them from active platforms within 30 days.
All photos and videos are securely stored and reviewed periodically to ensure they remain necessary and relevant for the purposes outlined. Materials deemed no longer necessary will be securely deleted.
10. Contact Information
For questions, concerns, or requests about this privacy policy or your personal data, you can contact us at:
Data Controller: Ankersen Drake Ltd
GDPR Officer Name: Amalie Kirkfeldt Ankersen
Email: amalie@ankersendrake.co.uk
Phone: 020 4529 4663
Address: 114a Netherwood Road, London, W14 0BQ
For clients under a Service Agreement, additional contact details may be provided in your contract.
11. Complaints
If you believe your data rights have been violated, you can lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk
Phone: 0303 123 1113
We encourage you to contact us first to address your concerns directly.
12. Updates to This Policy
We may update this privacy policy to reflect changes in our practices, services, or legal obligations. The latest version will always be available on our website or provided upon request.
Last updated: 22 January 2025
13. This Website
The sections above describe how we handle personal data as part of our services. This section describes what this website itself does, which is deliberately very little.
Who is responsible for your data
The data controller is Ankersen Drake Ltd, a company registered in England and Wales under company number 14915510, whose registered office is 114a Netherwood Road, London, W14 0BQ, United Kingdom.
You can reach us at contact@ankersendrake.co.uk or on 020 4529 4663. If you are not satisfied with how we have handled your personal data you have the right to complain to the Information Commissioner's Office at ico.org.uk.
The enquiry forms
When you use the enquiry form we ask for your name and for either an email address or a telephone number (with its dialling code), so that we can reply. Your preferred method of contact and a message are optional, and the form works without them. We ask for nothing else, and there are no fields for special category data.
The consultation enquiry asks about your home, what you would like help with and the approximate scale of the project, so that we can judge how best to help. You may add up to twelve photographs of the relevant spaces; they are optional. Each photograph is reduced in size on your own device before it is sent, which also removes the camera's location data and other hidden information from the file.
What you submit is delivered to us so that we can reply to you. It is not added to a marketing list, and submitting an enquiry does not sign you up to anything. There is no newsletter on this site.
The forms carry no pre-ticked boxes and no requirement to agree to this policy in order to send an enquiry. The link to this policy beside the form is there so you know what happens to your message before you send it.
Who handles it
The site is hosted by Netlify, which operates the servers that serve these pages and run the enquiry forms.
Enquiries are received through Netlify Forms, the form service of our hosting provider. Each enquiry is stored there against this website and a copy is sent to our email inbox from there, so that we can reply to you.
Photographs added to a consultation enquiry are kept in Netlify Blobs, our hosting provider's private file storage, in its Frankfurt (eu-central-1) region in the European Union. They are stored under a reference code that identifies nothing about you, are never published or linked from any public address, and can be opened only by members of our team signed in to the hosting account. The enquiry entry carries only the reference code and the number of photographs.
Netlify acts on our instructions as a processor. We do not sell personal data, and there are no advertising or data-broking arrangements.
How long we keep enquiries
An enquiry that does not lead to a project is kept for twelve months after our last meaningful contact with you about it, so that we can answer a follow-up question, and is then deleted from the form service and from our inbox.
Where an enquiry leads to work, the details we need are transferred to your client record and kept under the terms set out in the sections above, and the original form entry is deleted at the same point.
Photographs added to an enquiry are deleted no later than ninety days after the enquiry is closed, unless they have become part of an active client project's records, which are kept under the terms set out in the sections above. Photographs chosen for an enquiry that was never sent are deleted within two days.
Cookies, analytics and advertising measurement
This website uses two optional services from Google. Neither runs, and no cookie for either is set, until you have given the relevant consent through the cookie notice described below.
Google Analytics shows us, in aggregate, how the website is used: which pages are visited, how visitors arrive and whether a visit leads to an enquiry. We use it to understand what to improve.
Google Ads conversion measurement tells us whether a visit that began with one of our advertisements led to an enquiry, so that we can judge whether the advertising is worthwhile. It records that an enquiry was made, never what it said. We do not use either service for personalised advertising, and we do not send Google your name, email address, telephone number or anything you write in an enquiry.
When you first visit, a short notice at the foot of the page asks whether to allow these services. “Accept all” allows both, “Reject non-essential” allows neither, and “Preferences” lets you allow one and not the other. Nothing is selected for you, and every page and form on this site works whatever you decide. Your choice is kept for six months in a cookie named “ad-consent”, which holds only the choice itself. You can change or withdraw it at any time from “Cookie Preferences” in the footer of any page. If you withdraw a choice, we stop the service, remove the Google measurement cookies that were set through this site from your browser and reload the page so that nothing further is collected; information Google has already received is kept under Google’s own policies.
If you allow analytics, Google Analytics sets cookies named “_ga” and “_ga_” followed by our property’s identifier, which distinguish one browser from another for up to two years. In our Google Analytics account, event data is kept for two months and user data for fourteen months, extended each time the same browser returns; the aggregated reports we draw from it do not identify you.
If you allow advertising measurement, Google Ads sets cookies named “_gcl_au” and, when you arrived from one of our advertisements, “_gcl_aw” or similar, for up to ninety days; they carry the identifier of the advertisement you clicked so that an enquiry can be counted against it.
In providing these services Google receives technical information from your browser, including your IP address, the pages you visit on this site and the identifiers in the cookies above. Google processes it on our behalf and may also use it for its own purposes, as described in Google’s privacy policy and in How Google uses information from sites or apps that use our services. Google’s servers may be outside the United Kingdom; transfers are covered by Google’s standard contractual clauses with the UK addendum.
Apart from your choice, this site sets no other cookies. It stores one item in your browser’s session storage, named “ad-splash-seen”, which records only that the opening screen has been shown so that it is not repeated as you move around the site; it contains no identifier and is discarded when you close the tab.
The typefaces are served from this site rather than from a font service, so viewing a page does not send a request to any third party other than the Google services described above, and those only with your consent.
If, after reviewing your enquiry, we send you a link to choose a consultation time, it opens a booking page on Google Calendar, a service run by Google. Nothing from it is loaded into this site; if you follow the link, Google’s own privacy policy applies to the booking.
Technical information
Like any website, our hosting receives the technical information your browser sends in order to deliver a page, including your IP address. This is used to serve the site and to keep it secure and available.
To stop the enquiry form being abused we count recent submissions from the same source. Your IP address is converted into an irreversible code before it is counted, so the address itself is not stored for this purpose and cannot be recovered from the code. The count is discarded after a short period.
So that an enquiry sent twice by mistake reaches us once, a code made from its content (which cannot be turned back into the message) is kept for the same short period and then discarded.
If you have a question about anything on this page, or you want to exercise any of the rights described in Section 7, please contact us using the details in Section 10.