Privacy policy.

Who controls your information

LUMA is an independent web studio based in Leeds and is the controller of personal information described in this policy. Contact hello@lumaproject.co.uk or call 07309 876405.

Information collected

LUMA may collect your name, contact details, business details, project requirements, correspondence, files you provide, contract and billing records, and technical security logs created when the website or hosting systems are used.

The project planner does not submit information to a database. It prepares an email in your own email application.

Why it is used

Enquiries and contracts

To respond, prepare a quote, deliver a project and provide support. The lawful basis is taking steps at your request before a contract and performing a contract.

Administration and security

To manage records, protect systems, prevent misuse and operate the business. The lawful basis is LUMA's legitimate interests in running and protecting the studio.

Legal and financial records

To meet tax, accounting and other legal duties. The lawful basis is legal obligation.

Marketing

LUMA will use consent where consent is required. You can withdraw it at any time.

Who receives it

Information may be shared with hosting, domain, email, payment, accounting and specialist service providers where needed to run the website or deliver your project. It may also be disclosed when required by law. LUMA does not sell personal information.

International transfers

Some service providers may process information outside the UK. Where this happens, LUMA will use a lawful transfer route and appropriate safeguards required by UK data protection law.

How long it is kept

Enquiry records are normally kept for up to 24 months unless a project proceeds or there is a legal reason to keep them longer. Contract, project and financial records may be kept for up to six years after the relevant relationship or accounting period. Technical logs are kept for the period required for security and operation by LUMA or the hosting provider.

Cookies and analytics

This website does not currently use advertising cookies or visitor analytics. Essential hosting and security systems may process technical request data. If non-essential tracking is added, this policy and the consent controls will be updated first.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict or receive your information, and to object to its use. Where processing relies on consent, you may withdraw consent at any time.

Complaints

Contact LUMA first so the issue can be investigated. You also have the right to complain to the Information Commissioner's Office through ico.org.uk.

Changes

This policy will be reviewed when the website, suppliers or use of personal information changes. The effective date above will be updated.