Privacy &
Data Protection.

Luminous Living Limited (company number 10581985), trading publicly as Luminous Experiences by Luminous Living, is the data controller for personal information described in this notice.

Registered office: 1 Craftsman Square, Temple Farm Ind Estate, Southend On Sea, SS2 5RH.
Operational/client address: 7 Rylands Road, Southend-on-Sea, SS2 4LW.
Email: info@luminousexperiences.com
Phone: 07377 936886

Depending on the route you choose, this may include your name, email, telephone number, organisation and role, enquiry content, booking date/time, event or training selection, order details, delivery address, payment status and transaction reference, marketing preference, consent records, and limited website source/analytics information where permitted.

For under-18 private bookings we also record the fact that a parent or legal guardian made or confirmed the booking. We do not use children’s booking information for behavioural advertising.

Please do not submit medical records, diagnoses, detailed health histories or other sensitive health information through general website forms. The public booking forms are designed for practical booking details only. If sensitive information is genuinely needed for a private service, Luminous will request only what is necessary through an appropriate process and document the applicable UK GDPR Article 9 condition.

Contract and pre-contract steps: to answer a requested enquiry, reserve an appointment, take or verify payment, fulfil an order, provide digital access, administer an event or training place and deliver the service you bought.

Legal obligation: where records must be kept for accounting, tax, consumer protection, safeguarding, dispute handling or other legal requirements.

Legitimate interests: to protect the website and business, prevent duplicate or fraudulent bookings, maintain proportionate operational records, improve services using non-intrusive information, and establish or defend legal claims where appropriate. We balance these interests against your rights.

Consent: for optional analytics cookies/storage, and for direct electronic marketing where consent is the appropriate basis. You can withdraw consent at any time without affecting processing that was lawful before withdrawal.

Card payments are processed using Stripe-hosted checkout. Your full card number and security code are entered on Stripe’s payment environment and are not stored in Luminous website page code. Luminous receives the information needed to identify and administer the transaction, such as purchaser details, payment status, amount and transaction/session reference.

Where PayPal or another payment route is introduced, this notice will apply to the information Luminous receives and the provider’s own privacy information will apply to the payment data it processes.

Essential storage may be used for requested functions such as forms, booking integrity, security and remembering your privacy choice. Optional Google Analytics is off by default and is only loaded after you choose to allow analytics.

The site does not make access to bookings, purchases or enquiries conditional on accepting analytics. You can change your choice at any time using Cookie settings / the Cookie Notice.

We use carefully selected service providers where needed to operate Luminous. Depending on your interaction, these may include WebsitePublisher for website/forms and booking infrastructure, Stripe for card payments, Resend for transactional email, Google services for calendar/meeting functions and consented analytics, and professional advisers or authorities where disclosure is legally required.

Providers receive only the information needed for their role and may act as processors or, for some services such as payment processing, as independent controllers for parts of their processing. We do not sell personal information to advertisers.

Some technology providers may process or make information accessible from countries outside the UK. Where UK data protection law requires safeguards for an international transfer, Luminous expects the relevant provider arrangements to use an approved safeguard or other lawful transfer mechanism. Provider privacy documentation may contain further detail about locations and safeguards.

We keep personal information only for as long as it is reasonably needed for the purpose collected and any legal, accounting, safeguarding or dispute period that applies. Our retention criteria are:

• unconverted general enquiries are periodically reviewed and removed when no longer useful for the enquiry or a reasonable follow-up period;
• booking, order, payment and contract records are retained for the period needed to administer the relationship and meet applicable accounting, tax and legal record-keeping duties;
• marketing contact details are kept until you unsubscribe, withdraw consent, or the record is removed through periodic list hygiene;
• analytics data follows the retention controls configured in the relevant analytics service;
• records concerning a child or safeguarding matter may require a different retention period where safeguarding or legal obligations justify it.

Luminous reviews retention and access periodically rather than keeping information indefinitely by default.

Luminous uses data-minimisation, provider-hosted payment entry, access controls, secure secret storage, HTTPS delivery and proportionate operational safeguards. Payment secrets must not be placed in public webpage code. Access to business systems should be limited to authorised users and protected with strong authentication.

No internet service can promise absolute security. If Luminous becomes aware of a personal-data incident, it will assess, contain, document and, where the legal threshold is met, notify the ICO and affected individuals within the applicable time requirements.

Depending on the circumstances, you may have rights to be informed, access your personal data, correct inaccurate information, request erasure, restrict processing, object to processing, receive certain information in a portable form, and withdraw consent. Some rights are subject to legal exceptions.

To make a request, email info@luminousexperiences.com. We may need to verify identity before disclosing personal information.

You also have the right to complain to the UK Information Commissioner’s Office (ICO). We would welcome the opportunity to address a concern directly first, but this does not limit your right to contact the ICO.

Transactional messages about a booking, order, Student Share or service you requested are separate from promotional marketing. Where a form asks whether you want wider Luminous news, events or offers, that marketing choice is optional. Every marketing route should provide a practical way to unsubscribe or withdraw consent.

This notice is reviewed when website technology, payment routes, products or data practices change. Material changes will be reflected on this page.