Aipedia: Interior designers

Client home photos, AI tools and privacy

Aipedia, by the Apex broking team · Last reviewed 2026-10-27

Uploading photos and plans of a client's home to an AI tool is a disclosure of confidential and often personal data, so BIID clause 5 and UK GDPR apply. Interior designers hold intimate information about homes, families and security that clients expect to stay private.

Part of: AI in Interior designers

In short

Interior designers routinely receive photos, floor plans, budgets and details of clients' lives. Uploading them to AI tools for restyling, layouts or renders sends that data to a third party, which may store it or use it to train models. BIID Code clause 5 requires secure handling, no disclosure beyond what the client agreement allows, regular review of processes and immediate notification after a breach. UK GDPR applies to personal data. Check tool settings, get client agreement, strip identifying details, and know how your PI and cyber cover respond to a data claim.

Why home photos are sensitive

Photos and plans of a private home reveal more than décor. They can show:

the layout of the property, entrances and the location of bedrooms;
alarm panels, safes, valuables and artwork;
family photographs, children's rooms and documents left on surfaces;
health aids that indicate medical conditions;
the address, through views, post or metadata embedded in the file.

Much of this is personal data, and some may be sensitive. Clients share it because they trust the designer, and they rarely expect it to leave the studio.

The duties that apply

The BIID Code of Conduct (1 April 2026) has no AI clause, but clause 5 is directly relevant:

5(a): handle and securely store client data;
5(b): take reasonable steps to safeguard confidential client data;
5(c): ensure project parties do not use or disclose information other than as the client agreement permits;
5(e): review processes regularly, and notify affected parties immediately after a breach.

Clause 5(c) limits use of client information to what the client agreement permits or the client consents to in writing, which matters if past clients' homes are put into prompts for new pitches. Under UK GDPR, the designer is usually the controller of client personal data and must have a lawful basis, be transparent, and use processors with appropriate safeguards. Since 5 February 2026, section 80 of the Data (Use and Access) Act 2025 has inserted Articles 22A to 22D on automated decision-making, which matter if any tool makes significant decisions about people.

How AI tools handle uploads

AI services differ widely. Some keep uploads only for the session; others store them, allow staff to review them, or use them to improve their models, sometimes by default. Terms for free or consumer versions can differ from those for business plans. Before using any tool with client material, check its terms on storage, location, training and deletion, and whether you can switch training off.

What can go wrong

Illustrative scenario. A designer uploads photos of a client's home, including the hallway alarm panel and a home office with documents on the desk, to a free AI restyling app. The app's terms allow uploads to be used for training and shared with service providers. The client later learns of this, complains that their security and privacy were compromised, and threatens a claim for distress and the cost of upgrading their security. The designer must also consider whether there has been a personal data breach and whether UK GDPR requires it to be reported to the ICO.

How PI and cyber usually respond

Some interior designers' PI policies cover civil liability for breach of confidentiality or data protection; others limit it or leave it to cyber insurance. Cyber policies commonly cover breach response costs, notification and some liability claims, subject to their terms. Regulatory fines are often uninsurable or excluded. The data protection civil claims and cyber or PI overlap guide explains how the policies interact, and the cyber insurance guide covers the basics. See also does PI cover AI and IP claims.

Practical controls

Use business plans with training switched off, and check where data is stored.
Crop or blur security systems, documents, family photos and addresses before upload.
Remove location metadata from images.
Tell clients in your agreement and privacy notice that AI tools may be used, and respect objections.
Never use past clients' homes in prompts without written permission.
Keep a register of approved tools, and review it under clause 5(e).
Have a breach plan that covers notifying clients promptly. The AI client briefing tools guide covers data collected by chatbots.

How Apex helps: Apex arranges PI for interior designers. A broker can check how your PI and any cyber policy treat data and confidentiality claims arising from AI tools. See PI insurance for interior designers.

Sources

Frequently asked

Can I upload client photos to an AI design tool?

Only with care. BIID clause 5 and UK GDPR require secure handling and no disclosure beyond what the client has agreed. Use tools that do not train on uploads, remove identifying details, and tell clients how their images are used.

Is a photo of a client's home personal data?

Often, yes. Photos can identify the client, their family and their address, and may reveal health information or security arrangements. Treat them as personal data unless you are sure they are not.

What should I do if client photos are exposed through an AI tool?

Act quickly. BIID clause 5(e) calls for immediate notification of affected parties, UK GDPR may require reporting to the ICO, and you should notify your insurers promptly under your PI and any cyber policy.

Check your PI covers how you use AI

Tell us about your firm and the work you do. A broker will review how your current PI treats AI-assisted work, or arrange new cover. No fee for a quote. Or call 0117 325 0027.

Start a PI quote Request a callback

Apex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about how AI is used in the profession and how insurance may respond. It is not legal, regulatory or insurance advice on your circumstances, and it does not guarantee that cover will be available or on what terms.