Privacy policy.

Who controls your information

LUMA is an independent web studio based in Leeds and is the controller of personal information described in this policy. Contact hello@lumaproject.co.uk or call 07309 876405.

Information collected

LUMA may collect your name, contact details, business details, project requirements, correspondence, files you provide, contract and billing records, and technical security logs created when the website or hosting systems are used.

For free website health checks, LUMA collects the website domain, email address and contact number entered into the audit form so the request can be reviewed and followed up.

If you allow analytics, Google Analytics receives information about page visits and interactions, together with technical information such as device, browser and approximate location derived from the connection. LUMA does not send names, email addresses, form contents, audit form answers or project-planner answers to Analytics.

The project planner does not submit information to a database. It prepares an email in your own email application.

Why it is used

Enquiries and contracts

To respond, prepare a quote, deliver a project and provide support. The lawful basis is taking steps at your request before a contract and performing a contract.

Administration and security

To manage records, protect systems, prevent misuse and operate the business. The lawful basis is LUMA's legitimate interests in running and protecting the studio.

Legal and financial records

To meet tax, accounting and other legal duties. The lawful basis is legal obligation.

Marketing

LUMA will use consent where consent is required. You can withdraw it at any time.

Who receives it

Information may be shared with hosting, domain, email, accounting and specialist service providers where needed to run the website, process a free health check request, deliver your project or keep business records. If you allow analytics, Google acts as an analytics service provider. Information may also be disclosed when required by law. LUMA does not sell personal information.

International transfers

Some service providers may process information outside the UK. Where this happens, LUMA will use a lawful transfer route and appropriate safeguards required by UK data protection law.

How long it is kept

Enquiry records are normally kept for up to 24 months unless a project proceeds or there is a legal reason to keep them longer. Contract, project and financial records may be kept for up to six years after the relevant relationship or accounting period. Technical logs are kept for the period required for security and operation by LUMA or the hosting provider.

Cookies and analytics

Google Analytics is optional and does not load until you choose “Allow analytics”. LUMA uses it to measure page visits, project interactions, contact actions and project-planner use. Advertising storage and advertising personalisation signals are disabled. You can change the choice through “Analytics settings” in the footer.

The consent choice is stored on the device so the website can remember it. Essential hosting and security systems may also process technical request data.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict or receive your information, and to object to its use. Where processing relies on consent, you may withdraw consent at any time.

Complaints

Contact LUMA first so the issue can be investigated. You also have the right to complain to the Information Commissioner's Office through ico.org.uk.

Changes

This policy will be reviewed when the website, suppliers or use of personal information changes. The effective date above will be updated.