Privacy policy

Last updated: April 2026
Mediterranean Villa Design: What’s Common?

1. Introduction

Whiterock Studio ("Whiterock", "we", "us", "our") is committed to protecting the personal data of everyone who interacts with our website and services. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to it.This policy applies to the website whiterock.studio and all services provided by Whiterock, operated as part of the +Render Group. By using our website, you agree to the collection and use of information in accordance with this policy.

2. What Data We Collect

Data you provide directly:

  • Name and surname
  • Email address
  • Phone number (if provided)
  • Country and project location
  • Project details shared via contact forms or email
  • Any other information you voluntarily submit to us

Data collected automatically:

  • IP address
  • Browser type and version
  • Pages visited and time spent on site
  • Referring URLs
  • Device type and operating system
  • Cookie data (see Section 7)

3. Why We Collect Your Data

We collect and process your personal data for the following purposes:

  • To respond to your enquiries. When you submit a contact form or reach out via email, we use your data to respond to your request and discuss your project.
  • To deliver our services. If you engage Whiterock for architectural or related services, we process your data as necessary to manage and deliver those services under our agreement.
  • To improve our website. Anonymised analytics data helps us understand how visitors use the site and how we can improve the user experience.
  • To send relevant communications. With your consent, we may send updates about projects, services, or insights that may be relevant to you. You can withdraw consent at any time.
  • To comply with legal obligations. In certain cases, we are required to process or retain data to comply with applicable law.

4. Legal Basis for Processing

We process your personal data under the following legal bases in accordance with the General Data Protection Regulation (GDPR):

  • Consent — when you submit a form or opt in to communications
  • Contractual necessity — when processing is required to fulfil a service agreement
  • Legitimate interests — for website analytics and improving our services, where those interests are not overridden by your rights
  • Legal obligation — where required by applicable law

5. How We Share Your Data

Whiterock does not sell, rent, or trade your personal data. We may share your data only in the following circumstances:

  • Within the +Render Group. Whiterock operates alongside +Render and Calacata as part of the +Render Group. Data may be shared internally where relevant to a project or service you have requested.
  • With trusted service providers. We work with third-party providers for website hosting, analytics, and communication tools. These providers are contractually bound to process data only on our behalf and in accordance with GDPR.
  • With local technical partners. Where your project involves collaboration with a local architecture or engineering office in another country, relevant project information may be shared with that partner for the purposes of permits, licensing, or construction management. We will inform you when this applies.
  • When required by law. We may disclose data if required by a court order, regulatory authority, or applicable legal obligation.

6. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this policy:

  • Enquiry data — up to 2 years from last contact, unless a project engagement follows
  • Project and contractual data — for the duration of the project plus 10 years, in accordance with Spanish professional and legal requirements for architectural documentation
  • Analytics data — in anonymised form, indefinitely
  • Marketing communications — until you withdraw consent

7. Cookies

Our website uses cookies to improve your browsing experience and to collect anonymised usage data.‍

‍Types of cookies we use:

  • Essential cookies — required for the website to function correctly. Cannot be disabled.
  • Analytics cookies — help us understand how visitors interact with the site (e.g. Google Analytics). Data is anonymised.
  • Preference cookies — remember your settings and choices across visits.
  • Marketing cookies — used only with your explicit consent to deliver relevant content.

You can manage or withdraw your cookie consent at any time through the cookie settings banner on our website or through your browser settings. Note that disabling certain cookies may affect website functionality.

‍

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access — request a copy of the data we hold about you
  • Right to rectification — request correction of inaccurate or incomplete data
  • Right to erasure — request deletion of your data where there is no legitimate reason for us to continue processing it
  • Right to restriction — request that we limit how we process your data
  • Right to data portability — request your data in a structured, commonly used format
  • Right to object — object to processing based on legitimate interests or for direct marketing purposes
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at hello@whiterock.studio. We will respond within 30 days.

If you believe your rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD) at www.aepd.es.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include encrypted data transmission (SSL), access controls, and regular security reviews of our systems and processes.

No method of transmission over the internet is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

10. International Data Transfers

Whiterock operates internationally and may transfer your data to service providers or local partners located outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place in accordance with GDPR, including Standard Contractual Clauses approved by the European Commission.

11. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy applies only to whiterock.studio. We are not responsible for the privacy practices of external sites and encourage you to review their policies independently.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version will always be published at whiterock.studio/privacy-policy with the date of last revision noted below.

13. Contact

If you have questions about our use of cookies, contact us at:
Email: hello@whiterock.studio.