Privacy Policy
LatestDrawing.com Last updated: 11 July 2026
LatestDrawing.com is operated by Forty Four Design Limited, a company registered in England and Wales (company number 13704554) with its registered office at 39 South Street, Chichester, PO19 1EL ("we", "us", "our").
This policy explains what personal data we collect, why we collect it, and the rights you have over it. It applies to visitors to our website and to people who hold a LatestDrawing.com account.
1. The two roles we play
We handle personal data in two distinct capacities, and your rights differ depending on which applies:
As a data controller. When you register an account, we decide how and why your registration, profile and billing data are processed. This policy governs that data in full.
As a data processor. When a studio (an architecture practice or similar organisation) uses LatestDrawing.com to manage its projects, it may add the names and email addresses (and other data) of other people — builders, clients, subcontractors and other project participants — in order to share drawings with them. For that data, the studio is the data controller and we process it only on the studio's instructions, under our Data Processing Agreement. If you have been invited to a project and want your data corrected or removed, the fastest route is to contact the studio that invited you; you can also contact us and we will pass your request to them.
2. Data we collect as a controller
Account and profile data. Your full name, email address, password (stored only as a cryptographic hash — we never see or store the password itself) and, if you choose to upload one, a profile photo.
Studio data. The name and details of the studio you create or belong to, and your role within it.
Billing data. If your studio subscribes to a paid plan, payments are handled by Stripe. We do not receive or store your card number. We store your Stripe customer identifier, your plan, and your billing history.
Communications. Emails you send to us, and records of transactional emails we send you (such as invitations and account notifications), delivered via Resend.
Technical data. IP address, browser type and pages visited, collected in standard server logs for security and reliability purposes. We do not use analytics cookies or tracking pixels.
3. Why we process it and our lawful bases
| Purpose | Data | Lawful basis (UK GDPR Art. 6) |
|---|---|---|
| Providing your account and the service | Account, profile, studio data | Contract (6(1)(b)) |
| Taking payment and managing subscriptions | Billing data | Contract (6(1)(b)) |
| Sending transactional email (invitations, notifications, receipts) | Email address | Contract (6(1)(b)) |
| Securing the service, preventing abuse, debugging | Technical data | Legitimate interests (6(1)(f)) |
| Complying with tax and accounting law | Billing records | Legal obligation (6(1)(c)) |
| Responding to your enquiries | Communications | Legitimate interests (6(1)(f)) |
We do not sell personal data. We do not use personal data for advertising. We do not make automated decisions with legal or similarly significant effects.
4. Who we share data with
We use a small number of service providers ("sub-processors") to run LatestDrawing.com:
| Provider | Purpose | Location of processing |
|---|---|---|
| Supabase | Database, authentication and file storage | Switzerland (AWS eu-central-2, Zurich) |
| Stripe | Payment processing | EU/UK and United States |
| Resend | Transactional email delivery | Ireland (eu-west-1); company operations in the United States |
| Vercel | Application hosting | United Kingdom (lhr1) with global CDN; company operations in the United States |
We may also disclose data where required by law, or as part of a sale or reorganisation of our business (in which case this policy would continue to apply to your data).
5. International transfers
Your account data and uploaded documents are stored in Switzerland, which the UK government has formally recognised as providing adequate data protection — no additional safeguards are legally required for that transfer. Where other providers process data in countries without such adequacy recognition (for example, the United States), we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, and on the provider's own certifications where applicable (for example, the UK Extension to the EU–US Data Privacy Framework). Details are available on request.
6. How long we keep data
- Account data: for as long as your account exists. If you delete your account, all data is immediately deleted from our database and is unrecoverable, except that it may persist in encrypted backups for up to 7 days. If you cancel a subscription without deleting your account, we may delete your data after 30 days.
- Billing records: 6 years, as required by UK tax law.
- Server logs: up to 30 days.
- Backups: deleted data may persist in encrypted backups for up to 7 days before being overwritten.
Data we process on behalf of a studio is retained according to the studio's instructions and deleted when the studio deletes it or closes its account.
7. Your rights
Under UK GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to our processing of it, and to receive it in a portable format. Where processing is based on legitimate interests you may object at any time.
To exercise any right, email hello@fortyfourdesign.co.uk. We will respond within one month. We may need to verify your identity first.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to resolve the issue first.
8. Cookies
We use only strictly necessary cookies — those required to keep you signed in and to secure the service. We do not use analytics, advertising or tracking cookies, which is why you do not see a cookie banner. See our Cookie Notice for the full list.
9. Security
Data is encrypted in transit (TLS) and at rest. Access to production data is restricted to personnel who need it. Passwords are hashed and inaccessible to Forty Four Design Limited Directors or Employees.
Documents uploaded to the platform are stored in public storage which enables them to be accessible to anyone on construction sites in particular via a QR code or public share link. Documents are accessible to view without login credentials. To edit or modify files in a project, a user must be logged in with the required credentials.
10. Children
LatestDrawing.com is a business tool and is not intended for use by anyone under 18. We do not knowingly collect data from children.
11. Changes to this policy
If we make material changes we will notify account holders by email or by a notice in the application before the changes take effect. The "last updated" date at the top reflects the current version.
12. Contact
Forty Four Design Limited 39 South Street, Chichester, PO19 1EL hello@fortyfourdesign.co.uk ICO registration number: ZB577412