Privacy Policy
Last updated: · Short version: we collect what we need to do the work, and nothing is sold
1. Who we are
LUMORIA, operated as a UK sole trader, is the controller of the personal data you share with us. Contact: [email protected].
2. What we collect
Contact details you give us (name, email, phone, company). Booking details — the property address and any access notes, which we need to turn up and get in. Anything you write in a brief or enquiry. Correspondence. Payments run through Stripe, so we never see or store your full card details. We run first-party, privacy-friendly analytics: page views and referrers, no cross-site tracking and no advertising profile.
3. Why, and our lawful basis
To deliver what you booked and support you afterwards (performance of a contract). To answer enquiries and improve the service (legitimate interests). To meet accounting and legal duties (legal obligation). Marketing email only where you asked for it (consent), with an unsubscribe in every message that works first time.
4. Who processes it
A deliberately small set: Stripe (payments), Resend (email delivery), Cloudflare (hosting, delivery and analytics). Each under its own terms and security standards. We do not sell your personal data to anyone, for any amount.
5. Retention
As long as we need it to deliver the work and meet our accounting and legal obligations — then deleted. Access notes — keys, alarm codes, who holds a spare, whether anyone is living there — are erased automatically 30 days after the shoot is completed and the invoice is settled. The property address stays on the job and the invoice, because that is an accounting record we are required to keep. Delivered files stay available to you for 12 months and original unedited files are deleted after 90 days.
6. Your rights
You can access, correct, delete or port your data, and object to certain processing. Email [email protected] and we’ll action it. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.
7. International transfers
Some processors operate outside the UK. Where data is transferred internationally it is covered by appropriate safeguards.
8. Cookies
Only what is needed to run the site, plus a stored preference for which region’s prices to show you. No advertising trackers, no consent-banner theatre, because there is nothing here to consent to.
9. Changes
Updates get posted on this page with a new date at the top.
Something here unclear? Ask — [email protected]. We'd rather answer than have you guess.