1. Data Collection
We collect data. We store data. We use data to provide lighting consultation services. Data collected includes names, email addresses, phone numbers, and physical addresses of gallery locations. Technical data includes IP addresses, browser types, and access timestamps.
2. Cookies and Tracking
We deploy cookies. Cookies track analytics and preserve session state. Refer to our Cookie Policy for detailed breakdowns of essential, functional, and tracking cookies.
3. Third-Party Processors
We share data with infrastructure partners. Hosting providers. Email dispatch services. Analytics engines. These entities process data under strict data processing agreements. We do not sell data to data brokers. We do not monetize your personal information.
4. GDPR and CCPA Rights
You have rights. You may request access to your data. You may request correction of errors. You may demand deletion (the right to be forgotten). You may restrict processing. To exercise these rights, submit a written request via email.
5. Retention Periods
We keep contact data for the duration of the consultation process plus 24 months. Contract and invoice data remain on file for seven years to satisfy UK tax authority requirements. Analytics data expires after 14 months.
6. Security Measures
We encrypt data in transit via TLS 1.3. We encrypt data at rest via AES-256. Access requires multi-factor authentication. We log access attempts. Breaches trigger notifications within 72 hours.
7. DPO Contact
Data Protection Officer: Compliance Lead.
Email: [email protected]
Address: 14 Lumen Way, Illumination District, London, E1 8XZ, UK.