Legal
Privacy policy.
What this website does with your information, in plain English. Last updated 27 October 2026.
Who we are
This website is run by Outwright Atelier, an architecture and design studio based in Nairobi, Kenya. We decide why and how any personal information collected through this site is used, which makes us the “data controller”. You can reach us at [email protected] or on +254 706 652122.
What we collect
When you send us a project inquiry. The form on our Start a Project page asks for your name, email address and a description of your project. It also asks for your project type and location, and optionally your phone number, how you heard about us, the services you need, your budget range and your timeline. We only receive what you type into the form. A hidden spam-trap field is used to catch bots; real visitors never fill it in.
When you email or phone us. We keep the messages you send and our replies, as any business would.
When you simply browse. We do not ask you to create an account, and this site does not set cookies. We do not use analytics, advertising, tracking pixels or social-media tracking scripts, and we do not build profiles of visitors. Like any website, the services that deliver it (listed below) can see technical details such as your IP address, browser type and the pages requested.
Why we use it
We use the details in your inquiry to reply to you, to understand your project and to prepare for a first conversation. If you go on to work with us, we use them to deliver the work and keep the records a practice needs to keep. We do not sell your information, and we do not use it for marketing to you unless you ask us to keep in touch. Our legal basis is your consent when you submit the form, and our legitimate interest in running the studio and answering the people who contact us.
Who else handles it
- Formspree (formspree.io) receives what you submit in the inquiry form and forwards it to our email inbox. Formspree is based in the United States, so your submission is processed outside Kenya. See Formspree’s own privacy policy for how it handles data.
- Google Mail hosts the inbox where we receive inquiries and email.
- Cloudflare hosts and delivers this website. Like most hosts, it keeps standard server and security logs (such as IP address and requested pages).
- Sanity (sanity.io) stores and delivers some of the project and journal content you read on the site, including images. Your browser contacts Sanity’s servers to load it, which means Sanity can see your IP address. We send it no information about you.
- Google Fonts supplies the typefaces. Your browser requests the font files from Google’s servers, which means Google can see your IP address.
- Links to Instagram and LinkedIn take you to those services, which have their own policies. We do not load their scripts on this site.
We may also disclose information if the law requires it. Otherwise we do not share your details with anyone else.
How long we keep it
Inquiries that do not lead to a commission are kept for up to two years in case you come back, and then deleted. Information about clients and projects is kept for as long as the work and our professional and legal record-keeping obligations require. You can ask us to delete your inquiry sooner at any time.
Your rights
Under the Kenya Data Protection Act, 2019, you have the right to be informed about how your data is used; to access the personal data we hold about you; to object to its processing; to have inaccurate data corrected; and to have your data deleted. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, email [email protected]. We will reply as soon as we reasonably can and within the time the Act allows. If you are unhappy with how we have handled your data, you can complain to the Office of the Data Protection Commissioner of Kenya (odpc.go.ke).
Security
This website is served over HTTPS, and the inquiry form sends your details to Formspree over an encrypted connection. No system is perfectly secure, so please do not send sensitive information, such as identity or bank details, through the form.
Children
This site is aimed at people commissioning or exploring architecture and design work. It is not directed at children, and we do not knowingly collect their information.
Changes to this policy
If how this site handles information changes, for example if we add analytics, we will update this page and the date at the top.