Privacy Policy

This policy concerns personal information processed in connection with MasiR's website and professional services, which may include architectural design and visualization, portfolio development, research-related support, academic application documents, intellectual property support, and related consultations.

It covers information received through online forms, direct communications, orders, uploads, and technical interactions with our website. A separate contract or service agreement may contain additional terms concerning confidentiality, intellectual property, deliverables or the handling of specific project materials.

MasiR Architecture, also known as MasiR Architectural Studio, is a multidisciplinary architectural design and professional services studio established in 2017. With more than 100 completed architectural and academic projects, MasiR provides architectural design, 3D visualization, portfolio development, research and academic support, and related professional services to clients, students, architects, and researchers worldwide.

Our approach combines creative design, technical expertise, and professional standards to deliver tailored architectural and academic solutions. We are committed to maintaining professional communication, respecting client confidentiality, and handling personal information and project materials responsibly.

MasiR operates through a company legally registered in --------, with an authorized representative based in --------- who may communicate with clients. For data protection purposes, the legal entity responsible for determining how and why personal information is processed is identified below:

• Legal name of operator / controller: -
• Registered location / address: -
• Privacy enquiries: info@masirarchitecture.com

The information involved depends on how you use the website and which service you request. Categories may include:

Materials that you submit may incidentally contain information about other people or potentially sensitive personal information. Please provide only information necessary for your request and avoid sending unnecessary identity documents, financial details, medical records or other sensitive data.

We may obtain personal data directly from you when you complete a consultation or contact form, request a quote, register or purchase a service, upload documents, communicate by email, or provide information during a project.

We may also receive technical data automatically through our website's hosting, security and logging systems and, where enabled, cookies or similar technologies. In limited situations, information may be provided by another person involved in your project, an authorised representative, a payment service provider, or another source you have authorised.

If personal information is obtained about someone other than the person who submitted it, our responsibilities to provide notice depend on the circumstances and applicable law. You should ensure you are authorised to share third-party information included in project documents.

Personal data may be processed for the following purposes, depending on the service or interaction:

• Responding to enquiries and assessing the scope, feasibility, price and requirements of requested services.
• Preparing quotations, managing orders, performing agreed services and delivering project outputs.
• Communicating about project requirements, revisions, timelines, service updates and support requests.
• Managing invoices, payment confirmations, accounting records and applicable tax obligations.
• Operating, maintaining, troubleshooting and protecting the website, accounts and business systems.
• Investigating suspected misuse, preventing fraud and addressing legal claims or compliance requirements.
• Sending promotional communications where a valid legal basis exists and applicable marketing rules are met.
• Measuring and improving website functionality where relevant technology and lawful permissions are in place.

We will not use personal data for a new, incompatible purpose without first meeting applicable legal requirements, including providing additional information when necessary.

Where the EU or UK GDPR applies, a valid legal basis is required for each processing activity. Depending on the circumstances, relevant bases may include:

Where processing relies on consent, you may withdraw that consent at any time without affecting lawful processing that occurred before withdrawal. Where legitimate interests are relied upon, those interests should be assessed against the rights and expectations of individuals.

Many MasiR services involve materials that require particular care, including architectural drawings, unpublished design concepts, 3D models, technical specifications, academic records, research proposals, CVs, statements of purpose and invention-related documents.

These materials are intended to be used for assessing, managing and delivering the specific services requested, and for any additional uses separately agreed with the client. Access to materials is intended to be restricted to team members, professional collaborators and service providers who need the information for authorised tasks, under suitable confidentiality and data-protection arrangements.

Publishing a client's name, identifying project details, original documents or identifiable portfolio work as a testimonial, case study or public sample requires an appropriate permission or other valid legal basis. Anonymising or paraphrasing a project description does not automatically make the underlying information anonymous under privacy law.

Privacy obligations and intellectual property ownership are distinct matters. Ownership, licences, reuse rights, originality and final deliverables should be governed by the applicable service agreement and intellectual property terms, rather than assumed from this Privacy Policy alone.

Personal information may be disclosed only where appropriate for a legitimate and disclosed purpose, including to the following categories of recipients where they are actually involved in providing the relevant service:

• Authorised staff and professional collaborators involved in client support, project delivery, design, visualization or document preparation.
• Hosting, cloud storage, email, cybersecurity and website service providers that support the operation of MasiR's systems.
• Payment and financial service providers that process transactions, invoices or payment disputes.
• Professional advisers and authorities where disclosure is necessary for legal advice, the establishment or defence of claims, or compliance with applicable law.

We may share personal information with selected third-party service providers, including website hosting companies, payment processors, email service providers, and technical support services, where necessary for website operation and service delivery.

MasiR does not sell personal information or share personal data for cross-context behavioral advertising. We use and disclose personal information only for legitimate business purposes, including providing our services, processing orders, maintaining website functionality, and communicating with clients, as described in this Privacy Policy.

When you purchase a paid service from MasiR, we may collect and process information necessary to manage your transaction, including your name, billing details, purchased services, payment amount, currency, transaction reference, and payment status.

Payments are handled through the payment methods made available to customers at the time of purchase. Depending on the selected method, payment information may be processed by financial institutions or third-party payment service providers in accordance with their applicable privacy policies and terms.

MasiR may receive and maintain transaction confirmations, billing information, payment records, and other relevant financial details necessary to process orders, verify payments, provide customer support, and maintain accurate business records. The information accessible to MasiR depends on the payment method and the systems involved.

To protect financial information, customers should not submit complete payment card numbers, card security codes, banking passwords, or other sensitive payment credentials through ordinary email, contact forms, or project document uploads.

Payment and billing records may be retained where reasonably necessary for accounting, taxation, fraud prevention, dispute resolution, compliance with legal obligations, and other legitimate business purposes.

Refunds, cancellations, and payment-related disputes are handled in accordance with MasiR's applicable Terms & Conditions, Refund Policy, and relevant consumer protection laws.

The cookies and similar technologies used on the MasiR website may vary depending on the features, plugins, and third-party services currently enabled. These technologies may support essential website functions, security, user preferences, and, where applicable, website analytics.

Visitors can manage or delete cookies through their browser settings. Where required by applicable law, non-essential cookies must be subject to appropriate consent and user choice. MasiR's cookie disclosures and consent arrangements should reflect the technologies actually used on the website.

Depending on the law applicable to the visitor, non-essential cookies and similar technologies may require consent before they are set. Where consent is required, website functionality must allow users to make an informed choice and to withdraw that choice. You may also control or delete cookies through your browser settings, although disabling essential technologies can affect website functionality.

Our retention approach is based on keeping personal information no longer than reasonably necessary for the specified purpose, subject to legal obligations or legitimate needs such as responding to disputes and safeguarding systems. Retention is not necessarily the same for all categories of information.

Relevant factors include whether an order is ongoing, the nature of uploaded files, the agreed revision or support period, statutory accounting duties, potential legal claims, security needs and whether a user has validly requested deletion.

At the end of an applicable retention period, information is scheduled for deletion, de-identification or other handling required by law. Copies in backups may be subject to documented backup retention cycles.

MasiR recognises the importance of protecting customer information and confidential service materials. Security controls are selected with regard to the type and sensitivity of information, the systems involved and the risks of unauthorised access, disclosure, alteration or loss.

These measures may include restricted user access, authentication controls, transport encryption, system updates, backup procedures, security monitoring and confidentiality obligations for personnel or service partners, to the extent implemented and verified in MasiR's systems.

No internet-based service can guarantee absolute security. If you believe information relating to your account or project has been exposed or misused, please contact us using the privacy contact details below so the concern can be assessed promptly.

Because MasiR offers services to an international audience, personal information may be received from people in different countries. International transfers can also occur where relevant hosting providers, project collaborators, customer-support tools or payment processors are located outside a person's country of residence.

Where the EU or UK GDPR applies and personal data is transferred to a country without an applicable adequacy decision, the transfer must rely on a lawful mechanism where required, such as applicable standard contractual clauses and supplementary safeguards, or another valid legal basis.

Actual arrangements: [IDENTIFY RELEVANT HOSTING / RECIPIENT COUNTRIES, TRANSFER MECHANISMS AND HOW TO REQUEST INFORMATION ABOUT SAFEGUARDS.] A client's residence or the international nature of a service does not, by itself, establish that a particular transfer mechanism is in place.

Depending on your location, the applicable legislation and the circumstances of processing, you may have rights relating to your personal information. Under the GDPR these can include:

To make a privacy request, contact [PRIVACY EMAIL] and describe the right you wish to exercise. We may need to verify your identity before disclosing or changing personal information. Requests will be evaluated and answered within the period required by applicable law. Some rights are subject to exceptions; for example, information may need to be retained to meet a legal obligation or establish, exercise or defend legal claims.

Where relevant, individuals may also complain to a competent data protection supervisory authority. Individuals in the EU or UK should consult their relevant supervisory authority; see the European Data Protection Board's list of authorities or the UK Information Commissioner's Office.

Where MasiR sends newsletters, service news or promotional messages, the messages must have an appropriate legal basis and comply with applicable electronic marketing rules. Marketing preferences should be recorded separately where consent is needed, and withdrawal or opt-out requests should be respected.

You may request that direct marketing to you stop using the unsubscribe method included in a relevant message, where available, or by contacting [PRIVACY EMAIL]. Operational communications about an existing service, transaction, security issue or legal notice are distinct from promotional messages and may still be necessary after a marketing opt-out.

Some professional workflows can involve computer-assisted design, content analysis or other software tools. The privacy implications depend on whether a particular system processes identifiable client information, whether a third-party provider receives it, and how that provider is permitted to use submitted content.

[CONFIRM AND DESCRIBE ANY AI-ENABLED THIRD-PARTY TOOLS THAT RECEIVE PERSONAL DATA OR CLIENT MATERIALS, THEIR PURPOSES, DATA-USE / TRAINING SETTINGS, RECIPIENTS AND APPLICABLE SAFEGUARDS. IF NONE ARE USED, STATE THAT ACCURATELY.]

[STATE WHETHER MASIR USES SOLELY AUTOMATED DECISION-MAKING WITH LEGAL OR SIMILARLY SIGNIFICANT EFFECTS; IF YES, ADD REQUIRED INFORMATION ABOUT THE LOGIC, SIGNIFICANCE AND EXPECTED CONSEQUENCES.]

MasiR's professional services are primarily intended for adults and individuals authorised to enter into service agreements. If information about a child or minor is necessary for a legitimate request, it must be handled in accordance with the laws that apply to that person and the relevant service, including any requirements for parental or guardian authorisation.

If you believe that personal information relating to a child was submitted inappropriately, contact us so we can review the circumstances and take any required steps.

We may revise this Privacy Policy when our services, technologies, information-handling practices or applicable legal requirements change. The date at the top of this page identifies the latest published revision.

Where a change is material, we will provide any additional notice required by law. If a new use of personal data requires fresh consent or another legal step, updating this webpage alone will not replace that requirement. We encourage visitors and clients to review this page periodically.

For questions about this Privacy Policy, the handling of your information, confidential project files or requests to exercise privacy rights, contact MasiR using the details below. Include enough information for us to locate the relevant request or account, but please do not send passwords or unnecessary sensitive identification documents in your first message.

• Business / controller: [LEGAL ENTITY OR OWNER NAME]
• Privacy email: [PRIVACY EMAIL]
• Business address: [LEGAL BUSINESS ADDRESS AND COUNTRY]

If you are dissatisfied with our response, you may have the right to complain to the authority responsible for data protection in your jurisdiction.