Last updated
1. Who we are
Lumina is operated by ONESMALLSTUDIO LTD, a company registered in England and Wales under company number 13191827. ONESMALLSTUDIO LTD is the controller of the personal data described in this policy unless stated otherwise. Registered office: 139 Grosvenor Avenue, London, N5 2NH Privacy contact: lumina@onesmallstudio.co.uk
2. What this policy covers
This policy explains how we collect and use personal data when you visit the Lumina website, create or use an account, submit project information, buy a Lumina product or service, contact us or otherwise interact with Lumina.
3. Personal data we collect
We may collect: account and identity information such as name, email address, account identifier and authentication information; project information such as room names, dimensions, geometry, openings, ceiling information, intended use, preferences and notes; purchase and transaction information such as product purchased, price, currency, VAT information, transaction status and payment-provider references; communications such as support requests and feedback; technical and usage information such as IP address, device/browser information, session information, pages used, error logs and security events; and cookie/analytics information where applicable.
4. How we use personal data and lawful bases
We use personal data to provide the product or service you request and administer your account (contract); process orders, maintain transaction records and deal with payment issues (contract and legal obligation); respond to support requests (contract and/or legitimate interests); secure, diagnose and maintain the website and service (legitimate interests); understand and improve performance and user experience (legitimate interests where appropriate, and consent where required for the technology used); comply with tax, accounting and legal obligations (legal obligation); and send marketing where permitted (consent or another lawful basis where UK law permits). Where we rely on legitimate interests, those interests are operating, securing, supporting and improving Lumina in a proportionate way.
5. Project information and automated generation
Information submitted about a room or project may be processed to create personalised lighting-planning outputs. The service may use automated or AI-assisted systems to create or structure those outputs. This design-generation process is not intended to make decisions about individuals that produce legal or similarly significant effects. We use OpenRouter to run the AI generation. The project information you submit for a room is sent to it to create your plan.
6. Service providers and recipients
We use service providers to operate Lumina, which may include authentication/account management, payment processing, hosting, database/storage, AI/generation infrastructure, email/customer communications, analytics and error monitoring. Our current providers are Clerk (authentication and account management), Stripe (payment processing), Supabase (database and storage), Vercel (hosting), OpenRouter (AI generation) and Resend (email). We may also disclose information where required by law, to protect rights/security, or in connection with a genuine corporate transaction subject to appropriate protections.
7. International transfers
Some providers may process personal data outside the United Kingdom. Where personal data is transferred internationally, we use an appropriate lawful transfer mechanism required by UK data-protection law, such as UK adequacy regulations or approved contractual safeguards where applicable.
8. Retention
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, security and dispute-resolution requirements. Account/project data may be retained while an account remains active and for a reasonable period afterwards; transaction/accounting records are retained for the period required by law; support and security records are retained for a proportionate operational/legal period; cookie and analytics data follow the periods disclosed in
the Cookie Policy. Specifically, we keep account data until you ask us to delete it, and we keep lighting plans and support messages for 2 years.
9. Cookies and similar technologies
Lumina uses cookies and similar technologies for essential functions such as authentication, security and session management. We may also use optional analytics or similar technologies. Where consent is required, optional technologies will not be activated until the required choice has been made. See the Cookie Policy for details.
10. Security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No online service can guarantee absolute security. Users should protect their credentials and tell us if they suspect unauthorised access.
11. Your rights
Depending on the circumstances, UK data-protection law may give you rights to access personal data; correct inaccurate or incomplete information; request erasure; request restriction; object to certain processing; receive certain data in a portable format; withdraw consent where processing relies on consent; and complain to the Information Commissioner's Office. These rights are not absolute and can depend on the circumstances and lawful basis. We may need to verify identity before responding.
12. Marketing
You can opt out of direct marketing at any time by using the unsubscribe mechanism in a marketing communication or contacting us at lumina@onesmallstudio.co.uk. Opting out of marketing does not prevent us sending service or transaction communications that are necessary for your order or account.
13. Complaints
Please contact us first if you have a concern about how we use personal data. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator.
14. Children
Lumina is intended for adults planning residential lighting projects. The consumer service is not designed for children and we do not knowingly seek to collect children's personal data. If you believe a child has provided personal data to us, please contact us.
15. Third-party links
The website may link to third-party websites or products. Their privacy practices are controlled by those third parties and are not covered by this policy.
16. Changes to this policy
We may update this policy when our processing, providers, products or legal obligations change. We will publish the current version and, where appropriate, bring material new uses of personal data to users' attention before they begin.
17. Contact
ONESMALLSTUDIO LTD
Company number: 13191827
Registered office: 139 Grosvenor Avenue, London, N5 2NH
Privacy email: lumina@onesmallstudio.co.uk
1. Who we are
Lumina is operated by ONESMALLSTUDIO LTD, a company registered in England and Wales under company number 13191827. ONESMALLSTUDIO LTD is the controller of the personal data described in this policy unless stated otherwise. Registered office: 139 Grosvenor Avenue, London, N5 2NH Privacy contact: lumina@onesmallstudio.co.uk
2. What this policy covers
This policy explains how we collect and use personal data when you visit the Lumina website, create or use an account, submit project information, buy a Lumina product or service, contact us or otherwise interact with Lumina.
3. Personal data we collect
We may collect: account and identity information such as name, email address, account identifier and authentication information; project information such as room names, dimensions, geometry, openings, ceiling information, intended use, preferences and notes; purchase and transaction information such as product purchased, price, currency, VAT information, transaction status and payment-provider references; communications such as support requests and feedback; technical and usage information such as IP address, device/browser information, session information, pages used, error logs and security events; and cookie/analytics information where applicable.
4. How we use personal data and lawful bases
We use personal data to provide the product or service you request and administer your account (contract); process orders, maintain transaction records and deal with payment issues (contract and legal obligation); respond to support requests (contract and/or legitimate interests); secure, diagnose and maintain the website and service (legitimate interests); understand and improve performance and user experience (legitimate interests where appropriate, and consent where required for the technology used); comply with tax, accounting and legal obligations (legal obligation); and send marketing where permitted (consent or another lawful basis where UK law permits). Where we rely on legitimate interests, those interests are operating, securing, supporting and improving Lumina in a proportionate way.
5. Project information and automated generation
Information submitted about a room or project may be processed to create personalised lighting-planning outputs. The service may use automated or AI-assisted systems to create or structure those outputs. This design-generation process is not intended to make decisions about individuals that produce legal or similarly significant effects. We use OpenRouter to run the AI generation. The project information you submit for a room is sent to it to create your plan.
6. Service providers and recipients
We use service providers to operate Lumina, which may include authentication/account management, payment processing, hosting, database/storage, AI/generation infrastructure, email/customer communications, analytics and error monitoring. Our current providers are Clerk (authentication and account management), Stripe (payment processing), Supabase (database and storage), Vercel (hosting), OpenRouter (AI generation) and Resend (email). We may also disclose information where required by law, to protect rights/security, or in connection with a genuine corporate transaction subject to appropriate protections.
7. International transfers
Some providers may process personal data outside the United Kingdom. Where personal data is transferred internationally, we use an appropriate lawful transfer mechanism required by UK data-protection law, such as UK adequacy regulations or approved contractual safeguards where applicable.
8. Retention
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, security and dispute-resolution requirements. Account/project data may be retained while an account remains active and for a reasonable period afterwards; transaction/accounting records are retained for the period required by law; support and security records are retained for a proportionate operational/legal period; cookie and analytics data follow the periods disclosed in
the Cookie Policy. Specifically, we keep account data until you ask us to delete it, and we keep lighting plans and support messages for 2 years.
9. Cookies and similar technologies
Lumina uses cookies and similar technologies for essential functions such as authentication, security and session management. We may also use optional analytics or similar technologies. Where consent is required, optional technologies will not be activated until the required choice has been made. See the Cookie Policy for details.
10. Security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No online service can guarantee absolute security. Users should protect their credentials and tell us if they suspect unauthorised access.
11. Your rights
Depending on the circumstances, UK data-protection law may give you rights to access personal data; correct inaccurate or incomplete information; request erasure; request restriction; object to certain processing; receive certain data in a portable format; withdraw consent where processing relies on consent; and complain to the Information Commissioner's Office. These rights are not absolute and can depend on the circumstances and lawful basis. We may need to verify identity before responding.
12. Marketing
You can opt out of direct marketing at any time by using the unsubscribe mechanism in a marketing communication or contacting us at lumina@onesmallstudio.co.uk. Opting out of marketing does not prevent us sending service or transaction communications that are necessary for your order or account.
13. Complaints
Please contact us first if you have a concern about how we use personal data. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator.
14. Children
Lumina is intended for adults planning residential lighting projects. The consumer service is not designed for children and we do not knowingly seek to collect children's personal data. If you believe a child has provided personal data to us, please contact us.
15. Third-party links
The website may link to third-party websites or products. Their privacy practices are controlled by those third parties and are not covered by this policy.
16. Changes to this policy
We may update this policy when our processing, providers, products or legal obligations change. We will publish the current version and, where appropriate, bring material new uses of personal data to users' attention before they begin.
17. Contact
ONESMALLSTUDIO LTD
Company number: 13191827
Registered office: 139 Grosvenor Avenue, London, N5 2NH
Privacy email: lumina@onesmallstudio.co.uk