How we handle your information.

i/o atelier is a London-based interior architecture studio working at the intersection of design and machine intelligence. The trading entity is i/o Atelier Limited, registered in England and Wales. Contact: steven@io-atelier.com.

For the purposes of UK GDPR and the Data Protection Act 2018, we are the data controller for personal information collected through this site.

The information we hold falls into three buckets.

• Site analytics. When you accept the cookie banner, we use HubSpot tracking to record page views, the source that brought you to the site, and basic browser metadata. If you later identify yourself by filling in a contact form or unlocking the client portal, those page views are linked to your record.
• Contact details you share. Anything you send via a contact form, by email, on a call, or by accessing the client portal. Typically this is your name, email, company, and the context of why you reached out.
• Client portal access logs. When you unlock the materials at io-atelier.com/process we record the email you entered, the time of access, your IP address, and which videos or documents you viewed. This is so that confidential project material can be audited.

We use this information for the following purposes.

• To respond to enquiries, deliver projects, and run the studio.
• To understand which work is being read so we can publish more of what serves our audience.
• To send infrequent updates when there is something genuinely worth sharing. You can unsubscribe from any update at any time.
• To protect the studio and our clients by auditing who has accessed confidential materials.
• To comply with legal and regulatory obligations.

We do not sell or rent your data. We share it only with the following categories of recipient, and only where necessary.

• HubSpot. Our CRM and marketing platform. Stores contacts, conversation history, and analytics events.
• Vercel. Hosts this website and its serverless functions. Sees standard web request metadata.
• Microsoft 365. Email, calendar, and the SharePoint storage that holds the source files for portal videos.
• Professional advisers and authorities. When we are legally required to disclose information.

Some of these processors operate outside the UK. Where that is the case, we rely on the appropriate UK GDPR transfer safeguards, including the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

We use a small set of cookies, only after you accept the banner. The categories are.

• Strictly necessary. Used to remember your cookie choice and to keep the client portal session active once you have unlocked it. These are always on.
• Analytics. HubSpot tracking that records page views and identifies you to your contact record if you submit a form or access the portal. These only fire after you accept.

We do not run advertising cookies or third-party retargeting. You can change your mind at any time by clearing your browser storage for this site, which will surface the banner again.

Contact records and project files are retained for as long as we have an active relationship with you, plus seven years afterwards for accounting and regulatory reasons. Portal access logs are retained for two years. Analytics data follows HubSpot defaults and is reviewed annually.

Under UK GDPR you have the right to access the personal data we hold about you, to ask us to correct it, to ask us to delete it where there is no overriding lawful basis to keep it, to restrict or object to certain kinds of processing, and to data portability.

To exercise any of these rights, email steven@io-atelier.com. We will respond within one calendar month.

If you are not happy with how we have handled your data, you can complain to the Information Commissioner at ico.org.uk. We would always rather you spoke to us first, but it is your right.

We may update this notice from time to time. The date at the top of the page shows when it was last revised. Material changes will be flagged at the top of the page for a reasonable period.