Privacy Policy

Daylight is a structural design studio providing structural engineering, material science, and environmental planning services. For the purposes of data protection law, Daylight is the controller of the personal data described in this policy.

Registered entity name, company number, and registered office: [JURISDICTION PLACEHOLDER: insert legal entity details — review]

Data protection contact: help@granix.site

Enquiry data. Name, email address, organisation, site location, and the project description you submit through our contact form or by email.

Engagement data. Contact details of client and consultant personnel, billing details, correspondence, and project records including drawings, survey data, and site photographs that may incidentally contain personal data.

Technical data. IP address, browser and device type, referring page, and pages viewed, collected in server logs for security and reliability purposes.

We do not knowingly collect special category data, and we do not collect data from children.

To respond to enquiries and prepare proposals — on the basis of our legitimate interest in operating a professional practice, or steps taken at your request before entering a contract.

To deliver engineering services, issue documentation, and invoice — performance of a contract.

To meet professional, insurance, tax, and building-control obligations — compliance with a legal obligation.

To maintain website security and diagnose faults — legitimate interest in protecting our systems.

Applicable data protection legislation and supervisory authority: [JURISDICTION PLACEHOLDER: confirm governing law and regulator — review]

We share personal data only where it is necessary to deliver a project or comply with law: with the project's other appointed consultants and contractors; with building-control and planning authorities; with our professional indemnity insurers and legal advisers; and with service providers who host our email, document management, and analysis software under written processing terms.

We do not sell personal data and we do not use it for third-party advertising.

Some of our service providers may process data outside the jurisdiction in which you are located. Where that happens we rely on an approved transfer mechanism such as standard contractual clauses. [JURISDICTION PLACEHOLDER: confirm transfer mechanism — review]

Enquiries that do not lead to an engagement are deleted within 24 months. Project records, including calculations, drawings, and correspondence, are retained for the period of our professional liability exposure, which is typically 12 years from practical completion. [JURISDICTION PLACEHOLDER: confirm statutory limitation period — review] Financial records are retained for the period required by tax law.

Subject to the law applicable to you, you may request access to your personal data, correction of inaccurate data, erasure where we have no continuing basis to hold it, restriction of processing, portability, and objection to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent at any time.

To exercise a right, email help@granix.site. We respond within one month and may ask you to verify your identity. If you are dissatisfied you may complain to the supervisory authority named in section 3.

This website uses only cookies strictly necessary for the site to function. If we later introduce analytics or preference cookies, we will publish a cookie notice and request consent before those cookies are set.

We apply access controls, encrypted transport for data in transit, managed device policies, and role-based access to project files. No transmission over the internet can be guaranteed to be completely secure; we will notify affected individuals and the regulator of a qualifying personal data breach as required by law.

We update this policy when our processing changes. The date at the top of the page reflects the current version. Material changes affecting existing clients are communicated by email.