Privacy & Data Notes

These notes explain how LumenFest collects and uses personal data in line with the UK GDPR and the Data Protection Act 2018. They apply to this website, to booking messages and to ordinary business correspondence.

Controller contact

LumenFest, 18 Tidy Street, Brighton BN1 4EL, England. Phone: +44 1273 946 572. Email: [email protected].

What we collect

• Basic details you submit: name, contact information, event notes and delivery preferences.
• Message history relating to enquiries and bookings.
• Technical records from this site (e.g., access logs) and limited analytics if cookies are enabled.

Purposes and lawful bases

• Enquiries and bookings — to respond, provide quotes and supply hire services. Lawful basis: contract or steps prior to entering a contract.
• Business administration — accounting, record keeping and safeguarding our services. Lawful basis: legal obligation and legitimate interests.
• Service updates — important notices relating to an active booking. Lawful basis: contract/legitimate interests.
• Optional messages — only if you request them. Lawful basis: consent (you can withdraw it at any time).
• Cookies/analytics — only if you accept non-essential cookies. Lawful basis: consent.

Sharing

We share data with service providers who help operate this site and manage bookings (for example, secure email or hosting). They act under written terms and handle information only on our instructions. We do not sell personal data.

Transfers

Where a provider stores data outside the UK, appropriate safeguards are used (such as UK IDTA or standard contractual clauses). Details are available on request.

Retention

Booking records are generally kept for up to seven years for tax and accounting. Routine correspondence and enquiry notes are usually kept for up to two years. Technical logs may be kept for shorter periods to maintain service integrity.

Your rights

You can request access, rectification, erasure, restriction, and portability of your personal data, and you may object to processing based on legitimate interests. Where consent is used, you can withdraw it at any time. To exercise these rights, write to [email protected].

Cookies

Essential cookies support core functions (forms and consent storage). Preference and analytics cookies are optional and used only if you opt in. See the Cookie Preferences page for details and for changing your choice.

Security

We use proportionate technical and organisational measures, including access controls and routine updates. No method of transmission is entirely free from risk; please share only necessary details.

Complaints

If you have concerns, contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Updates

We may revise these notes when services or regulations change. The latest version appears on this page with a refreshed date.

Last updated: 12 November 2025