Preview in under a minute

Legal

Privacy policy

What we collect, who receives it, and how to make us delete it. Named specifically, not described vaguely.

Last updated 5 August 2026

What we collect

The photographs you upload and the portraits generated from them. Your email address, and your name and delivery address when you order. Your order history. If you sign in, the account identifier from your sign-in provider. Basic technical data such as your IP address and browser, which any web server receives, and aggregate page-view counts.

We never receive your card number. Payment details are entered on Stripe's own page.

Why we are allowed to hold it

To perform the contract you entered when you ordered — this covers your photograph, your artwork, your address and your order. To meet legal obligations, which is why order and tax records are kept for six years even after you ask us to delete your account. And for our legitimate interest in keeping the site working and secure.

We do not send marketing email unless you ask us to, and we do not sell or share your data with advertisers. We do measure whether a Google advert led to an order, if you allow it — that is counting sales, not sharing you, and it is explained under Cookies below.

Who else sees your photograph

These are the only parties involved, and what each one gets. Some are outside the UK and EEA; those transfers rely on the UK Addendum and the EU Standard Contractual Clauses.

Our image generation provider

Receives:
The photograph you upload, and the style you chose
Purpose:
To produce your portrait. This is the one step that genuinely requires sending your photograph outside our own systems
Location:
United States

Stripe

Receives:
Your email address, name, billing details and the order amount
Purpose:
To take payment. Your card number is entered on Stripe's own payment page and never reaches our servers
Location:
United States and Ireland

Our print partner

Receives:
Your name, delivery address, and the artwork file for your order
Purpose:
To manufacture and ship your order. They receive no payment details
Location:
United Kingdom, European Union or United States, whichever facility is nearest to you

Our email provider

Receives:
Your email address and the contents of order emails
Purpose:
To send order confirmations, dispatch notices and your artwork links
Location:
United States

Our hosting and file storage

Receives:
Your uploaded photographs, your generated portraits and your order records
Purpose:
To run the site and keep your studio available to you
Location:
United States

How long we keep things

Your portraits stay in your studio for as long as you want them there — we tell you in your confirmation email that nothing expires, and we mean it. Uploaded photographs are kept alongside them so a portrait can be remade if a print fails. Order and payment records are kept for six years, as UK tax law requires. Ask us to delete your account and we remove your photographs, portraits and account details, and retain only the order records the law obliges us to keep.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to our processing, or ask us to send it to another provider. Email support@lumina-art.studio and we will respond within one month. You do not have to give a reason, and asking costs nothing.

If you think we have handled your data badly, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your own national data protection authority if you are elsewhere in the EEA. We would rather you told us first, but it is your choice.

Cookies

We use a cookie to keep you signed in and to remember your basket and chosen country. These are necessary for the site to function and cannot be switched off without breaking it. These do not need your permission and we do not ask for it.

Separately, we advertise on Google, and we would like to know which adverts actually lead to an order — otherwise we are guessing, and guessing is expensive. That measurement uses Google Advertising cookies, so we ask first. Until you say yes, no advertising cookie is set and Google receives only anonymous, cookieless signals. If you say no, nothing about your visit changes: your basket, your account and your portraits behave identically.

To change your mind later, clear this site's data in your browser and the question will be asked again. We do not sell your data, and we do not use it to build advertising profiles beyond measuring whether an advert led to a sale.