Legal
Privacy policy
What we collect, who receives it, and how to make us delete it. Named specifically, not described vaguely.
Last updated 5 August 2026
What we collect
The photographs you upload and the portraits generated from them. Your email address, and your name and delivery address when you order. Your order history. If you sign in, the account identifier from your sign-in provider. Basic technical data such as your IP address and browser, which any web server receives, and aggregate page-view counts.
We never receive your card number. Payment details are entered on Stripe's own page.
Why we are allowed to hold it
To perform the contract you entered when you ordered — this covers your photograph, your artwork, your address and your order. To meet legal obligations, which is why order and tax records are kept for six years even after you ask us to delete your account. And for our legitimate interest in keeping the site working and secure.
We do not send marketing email unless you ask us to, and we do not sell or share your data with advertisers. We do measure whether a Google advert led to an order, if you allow it — that is counting sales, not sharing you, and it is explained under Cookies below.
Who else sees your photograph
These are the only parties involved, and what each one gets. Some are outside the UK and EEA; those transfers rely on the UK Addendum and the EU Standard Contractual Clauses.
Our image generation provider
- Receives:
- The photograph you upload, and the style you chose
- Purpose:
- To produce your portrait. This is the one step that genuinely requires sending your photograph outside our own systems
- Location:
- United States
Stripe
- Receives:
- Your email address, name, billing details and the order amount
- Purpose:
- To take payment. Your card number is entered on Stripe's own payment page and never reaches our servers
- Location:
- United States and Ireland
Our print partner
- Receives:
- Your name, delivery address, and the artwork file for your order
- Purpose:
- To manufacture and ship your order. They receive no payment details
- Location:
- United Kingdom, European Union or United States, whichever facility is nearest to you
Our email provider
- Receives:
- Your email address and the contents of order emails
- Purpose:
- To send order confirmations, dispatch notices and your artwork links
- Location:
- United States
Our hosting and file storage
- Receives:
- Your uploaded photographs, your generated portraits and your order records
- Purpose:
- To run the site and keep your studio available to you
- Location:
- United States
How long we keep things
Your portraits stay in your studio for as long as you want them there — we tell you in your confirmation email that nothing expires, and we mean it. Uploaded photographs are kept alongside them so a portrait can be remade if a print fails. Order and payment records are kept for six years, as UK tax law requires. Ask us to delete your account and we remove your photographs, portraits and account details, and retain only the order records the law obliges us to keep.
Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to our processing, or ask us to send it to another provider. Email support@lumina-art.studio and we will respond within one month. You do not have to give a reason, and asking costs nothing.
If you think we have handled your data badly, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your own national data protection authority if you are elsewhere in the EEA. We would rather you told us first, but it is your choice.
Cookies
We use a cookie to keep you signed in and to remember your basket and chosen country. These are necessary for the site to function and cannot be switched off without breaking it. These do not need your permission and we do not ask for it.
Separately, we advertise on Google, and we would like to know which adverts actually lead to an order — otherwise we are guessing, and guessing is expensive. That measurement uses Google Advertising cookies, so we ask first. Until you say yes, no advertising cookie is set and Google receives only anonymous, cookieless signals. If you say no, nothing about your visit changes: your basket, your account and your portraits behave identically.
To change your mind later, clear this site's data in your browser and the question will be asked again. We do not sell your data, and we do not use it to build advertising profiles beyond measuring whether an advert led to a sale.
