Privacy and Legal

Last updated: 6 November 2026

 

Privacy policy

Mandy Whitten Ltd (company number 16778075) is the data controller responsible for personal information collected through this website.

Mandy Whitten Ltd respects your privacy and is committed to protecting your personal information.

This policy explains what information we collect through our website, how we use it and your rights in relation to that information.
 

Information we collect

When you contact us through our website or by email, we may collect your name, email address and any information you choose to include in your enquiry.

If you subsequently become a client, we may collect additional information necessary to provide our interior architecture and design services.
 

How we use your information

We use your personal information to respond to enquiries, discuss potential projects, provide our services and manage our business relationships.

We do not sell your personal information or use your contact details for unsolicited marketing.

Our lawful basis for processing enquiries is generally our legitimate interest in responding to people who contact us. Where we provide services to you, we may also process information as necessary to enter into or fulfil a contract.


How your information is stored and retained

Our website is provided through IONOS, and our business email is managed through Google Workspace.

Personal information may be processed by these providers as part of delivering our website and email services. We take reasonable steps to keep your information secure and limit access to those who need it for legitimate business purposes.

We retain personal information only for as long as necessary for the purposes for which it was collected.

Enquiries that do not result in a project are generally retained for up to 12 months after our last correspondence, unless there is a legitimate reason to retain them longer.

Where an enquiry develops into a client relationship, relevant project information is generally retained for six years after completion, or longer where required by law, contractual obligations or the need to establish, exercise or defend legal claims.

Financial and accounting records are retained in accordance with applicable legal requirements.

Information is securely deleted or anonymised when it is no longer required.


International data transfers

Some of our service providers may process or store personal information outside the United Kingdom. Where this happens, we take steps to ensure that appropriate safeguards are in place to protect your information in accordance with UK data protection law.

 

Your rights

Under UK data protection law, you may have the right to access, correct or request the deletion of your personal information, object to certain uses of it or ask us to restrict how it is processed.

In certain circumstances, you may also have the right to receive your personal information in a portable format or request that it be transferred to another organisation.

Where we rely on your consent to process personal information, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

To make a request, please contact mandy@mandywhitten.com.

You also have the right to raise a concern with the Information Commissioner's Office (ICO) at www.ico.org.uk.

 

Cookies and website analytics

Our website uses IONOS SiteAnalytics to understand how visitors use the site and help improve its performance and user experience.

SiteAnalytics collects statistical information through a tracking pixel or server-side log files. It does not use cookies to store information on your device.

Information collected may include pages visited, referring websites, browser and device types, operating systems, times of access and anonymised IP addresses.

This information is processed in Germany and the European Union and is automatically deleted after eight weeks.

Where consent is required, visitors can manage or withdraw their consent through the website's privacy settings.

 

Legal Information

Mandy Whitten Ltd

Registered in England and Wales

Company registration number: 16778075

Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ

Email: mandy@mandywhitten.com

Copyright

Unless otherwise stated, the text, photographs, designs and other original content on this website are the property of Mandy Whitten Ltd or are used with permission.

No content may be reproduced or used commercially without the relevant copyright owner's permission.

Website information

The information on this website is provided for general guidance and may be updated without notice. Project descriptions and imagery are intended to illustrate our experience and design approach.

For enquiries about our services, please contact us directly.

 

Information icon

We need your consent to load the translations

We use a third-party service to translate the website content that may collect data about your activity. Please review the details in the privacy policy and accept the service to view the translations.