Privacy Policy

1. Who we are

Mohammed Ayan Hayat, trading as LUMORIA, is the controller of the personal data you share with us. Our business address is 80 Craddock Street, Cardiff, CF11 6EW, United Kingdom. Contact: hello@lumoriamedia.com.

2. What we collect

Contact details you give us (name, email, phone, company). Booking details, the property address and any access notes, which we need to turn up and get in. Anything you write in a brief or enquiry. A property price-match request includes your email, optional quote link, details or document and the page or package you were considering. An introductory-offer request includes your email, an optional telephone number, the offer shown and your separate marketing choices. We record the personal code, expiry and redemption against your email. The country for the telephone prefix can be suggested from your connection; you can change it. Requesting a code does not opt you into marketing. Uploaded quote documents are stored privately for our team to review. If you choose the optional email box, we also record your marketing choice, the wording shown and when you agreed. Correspondence. Payments run through Stripe, so we never see or store your full card details. We run first-party, privacy-friendly analytics: page views and referrers, no cross-site tracking and no advertising profile. If a link carries campaign labels, we can carry those labels to your enquiry, quote and booking to understand how you found us. This does not set an advertising cookie or collect advertising click identifiers.

3. Why, and our lawful basis

To deliver what you booked and support you afterwards (performance of a contract). To answer enquiries and improve the service (legitimate interests). To meet accounting and legal duties (legal obligation). Marketing email only where you asked for it (consent), with an unsubscribe in every message that works first time.

4. Who processes it

A deliberately small set: Stripe (payments), Resend (email delivery), Cloudflare (hosting, delivery and analytics). Choosing the call calendar loads Cal.com, which handles the details you provide to arrange a discussion. Choosing WhatsApp opens WhatsApp, provided by Meta; messages you send there are handled by that service. The calendar loads only when you choose it. These services operate under their own privacy policies. We do not sell your personal data to anyone, for any amount.

5. Retention

As long as we need it to deliver the work and meet our accounting and legal obligations, then deleted. Access notes, keys, alarm codes, who holds a spare, whether anyone is living there, are erased automatically 30 days after the shoot is completed and the invoice is settled. The property address stays on the job and the invoice, because that is an accounting record we are required to keep. Delivered files stay available to you for 12 months and original unedited files are deleted after 90 days.

6. Your rights

You can access, correct, delete or port your data, and object to certain processing. Email hello@lumoriamedia.com and we’ll action it. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.

7. International transfers

Some processors operate outside the UK. Where data is transferred internationally it is covered by appropriate safeguards.

8. Cookies

Only what is needed to run the site. No advertising trackers, no consent-banner theatre, because there is nothing here to consent to.

9. Changes

Updates get posted on this page with a new date at the top.

Contact hello@lumoriamedia.com.