Effective date: 27 August 2026
Last updated: 27 August 2026

1.1 Who we are

Global Studio Associates (“GSA”, “we”, “us” or “our”) is an architecture, design and consultancy practice.

Legal entity:Global Studio Associates 
Registered address: 
Commercial registration number: 
Website: www.gsaegy.com
Privacy contact: contact@gsaegy.com
Telephone:+20 128 200 3389

For applicable data-protection legislation, Global Studio Associates acts as the controller of the personal data described in this Privacy Notice unless otherwise stated.

1.2 Scope

This Privacy Notice explains how we collect, use, store, disclose and protect personal information relating to:

• Website visitors
• Existing and prospective clients
• Consultants, contractors and suppliers
• Professional advisers and project partners
• Job applicants
• Event attendees and newsletter subscribers
• Individuals contacting or visiting our offices
• Other persons involved in our projects and business activities

Separate notices may be provided to employees, consultants or participants in particular projects.

1.3 Personal data we collect

Depending on your relationship with us, we may collect:

Identity and contact information

• Name, title and organisation
• Business or personal address
• Email address and telephone number
• Professional role and contact preferences

Client and project information

• Project requirements and correspondence
• Property, site or location information
• Drawings, photographs, models and project records
• Contractual and invoicing information
• Records of meetings, instructions and decisions
• Information about project stakeholders

Project materials should not ordinarily include unnecessary personal or sensitive information.

Recruitment information

• CV, portfolio and cover letter
• Education, qualifications and employment history
• References and interview records
• Work eligibility information
• Salary expectations and availability
• Any accommodation information voluntarily provided for the recruitment process

Financial and transaction information

• Billing address
• Bank and payment information
• Tax and accounting records
• Details of services supplied or purchased

Website and technical information

• IP address
• Browser and device information
• Operating system
• Pages viewed and interactions with our website
• Approximate location derived from an IP address
• Cookie identifiers and consent preferences
• Referral source and access times

Communications

We may retain correspondence submitted through email, telephone, contact forms, social media or other communication channels.

Office and event information

Where appropriate and lawfully operated, this may include visitor records, access logs, event registration information and security-system records.

1.4 How we obtain personal data

We may receive information:

• Directly from you
• From your employer, representative or project team
• From clients, consultants, contractors and professional advisers
• Through recruitment agencies and professional platforms
• From publicly available sources
• Through our website, cookies and similar technologies
• From service providers supporting our operations
• From governmental, planning or regulatory bodies where permitted

1.5 How and why we use personal data

We may process personal data to:

• Respond to enquiries and proposals
• Deliver architectural, design and consultancy services
• Administer projects, appointments and contracts
• Coordinate with clients, consultants, contractors and authorities
• Manage suppliers and professional advisers
• Process payments and maintain financial records
• Recruit personnel and assess applications
• Organise events, presentations and communications
• Send news or marketing material where permitted
• Operate, secure and improve our website
• Protect our personnel, visitors, systems and premises
• Establish, exercise or defend legal claims
• Meet legal, professional, insurance and regulatory obligations

1.6 Legal bases

Where applicable law requires a legal basis, we may rely on:

• Contract: processing required to enter into or perform an agreement.
• Legal obligation: processing necessary to satisfy legal, tax, employment, professional or regulatory duties.
• Legitimate interests: operating and protecting our practice, administering projects, developing client relationships, improving services and preventing fraud.
• Consent: where you have freely given permission for a specific purpose.
• Legal claims or substantial public interests: where permitted by applicable law.

You may withdraw consent at any time. Withdrawal does not affect processing already undertaken lawfully.

1.7 Marketing communications

We may send professional updates, invitations or information about our services when you have consented or when otherwise permitted by law.

You can unsubscribe by:

• Selecting the unsubscribe link in an email
• Contacting us at contact@gsaegy.com
• Updating your communication preferences through [preference-centre link]

Essential communications concerning an existing project, contract or enquiry are not marketing communications.

1.8 Sharing personal data

We may share information with:

• Affiliated or associated GSA entities
• Clients and members of project teams
• Architects, engineers and specialist consultants
• Contractors and suppliers
• Planning, building-control and other public authorities
• IT, website-hosting, analytics, email and cloud-service providers
• Accountants, auditors, insurers and legal advisers
• Recruitment and background-screening providers
• Regulators, courts and law-enforcement authorities
• Parties involved in a restructuring, merger or transfer of our business

Recipients may only use personal data for authorised purposes and must provide appropriate protection where required.

We do not sell personal information for monetary consideration.

1.9 International transfers

Some recipients or technology providers may process information outside the country in which it was collected.

Where required, we use recognised safeguards, contractual protections or another lawful transfer mechanism. Information about relevant safeguards may be requested through our privacy contact.

1.10 Retention

We retain personal data only for as long as reasonably required for its intended purpose and to meet contractual, professional, insurance, tax, legal or regulatory obligations.

Retention periods may depend on:

• The nature and duration of a project
• Applicable limitation periods
• Professional indemnity requirements
• Statutory accounting and employment obligations
• Ongoing disputes or investigations
• The sensitivity and volume of the information

1.11 Security

We use appropriate organisational and technical measures intended to protect information from accidental loss, alteration, unauthorised access, disclosure or misuse.

These measures may include access controls, authentication, staff training, secure backups, supplier reviews, encryption and incident-management procedures. No internet transmission or storage system can be guaranteed to be completely secure.

1.12 Your rights

Depending on applicable law and your location, you may have the right to:

• Be informed about processing
• Request access to your personal data
• Correct incomplete or inaccurate information
• Request deletion
• Request restriction of processing
• Object to certain processing
• Withdraw consent
• Request data portability
• Object to direct marketing
• Obtain information about automated decision-making
• Submit a complaint to a competent data-protection authority

Rights may be subject to statutory exceptions.

Send requests tocontact@gsaegy.com. We may request reasonable evidence of identity before fulfilling a request.

In Egypt, the Personal Data Protection Centre is the relevant specialist authority. Its official website describes the Centre as leading Egypt’s efforts to establish an integrated personal-data protection environment. [pdpc.gov.eg]

1.13 Automated decision-making

We do not intend to make decisions producing legal or similarly significant effects solely through automated processing unless this is disclosed separately and permitted by law.

1.14 Children

Our website and professional services are not directed at children. We do not knowingly collect children’s personal data through the website without an appropriate lawful basis and any required parental or guardian authorisation.

1.15 Third-party websites

Our website may link to third-party websites or services. We are not responsible for their privacy, security or content practices. Visitors should review the policies provided by those third parties.

1.16 Complaints

Please contact us first at contact@gsaegy.com so that we can investigate your concern.

You may also complain to the data-protection authority with jurisdiction over your location or the relevant processing.

1.17 Changes to this notice

We may amend this Privacy Notice to reflect changes to our operations, technology or legal obligations. The current version will be published on this page with its updated revision date.

© 2026 Global Studio Associates. All rights reserved.