Privacy notice
Last updated 2026-06-10
This site sets no cookies, runs no analytics, and does no tracking. The only personal data we get is what you choose to type into the contact form - your email and your message - and we use it for one thing: replying to you.
Who is responsible
The controller of any personal data collected through this site is the operator of lume-studio.co. You can reach us at info@lume-studio.co for anything in this notice.
What we collect
Only what you give us:
- The contact form - your email address and the message you write.
- Email correspondence - whatever you send us if the conversation continues by email.
That is the full list. We do not buy data, enrich profiles, or collect anything behind your back.
Why we use it
To answer your enquiry and take the steps you ask for before any contract - which the GDPR covers as steps taken at your request prior to entering a contract (article 6(1)(b)) and as our legitimate interest in responding to people who write to us (article 6(1)(f)).
No cookies, no tracking
This site sets no cookies at all - which is why there is no cookie banner. There is no analytics script, no advertising pixel, no fingerprinting, and no social media embed watching you read.
Who touches the data
A small, boring list of service providers:
- Web3Forms - delivers what you type in the contact form to our mailbox. It runs on servers outside the EEA, and nothing beyond what you type into the form reaches it.
- Zoho Mail (EU data center) - hosts the mailbox where your message lands; your message stays inside the EU.
- Netlify - hosts this website and keeps standard server logs, as every host does.
About the one transfer outside the EEA: passing your form message through Web3Forms is an occasional transfer that is necessary to answer the enquiry you chose to send - the GDPR allows exactly this (article 49(1)(b)). We do not claim safeguards we do not have; if this site ever handles more than enquiry traffic, the form moves to an EEA provider first.
How long we keep it
For the life of the conversation. If you ask us to delete it, we delete it.
Your rights
Under the GDPR you can ask us for access to your data, rectification, erasure, restriction of processing, you can object to processing, and you can ask for portability. Email info@lume-studio.co and we will act on it. You also have the right to complain to a supervisory authority - in Portugal that is the CNPD, the national data-protection authority.
Changes to this notice
If anything here changes, we update this page and the date at the top.