Last updated: 13 September 2026

1. Who we are

Lumina Education Ltd is the controller responsible for the personal information described in this notice.

2. Information we collect

We may collect:

• your name, email address, telephone number, organisation and role;
• information you provide about an enquiry, opportunity or proposed project;
• correspondence and records relating to our discussions or work together;
• contractual, invoicing and payment information where you become a client;
• limited technical and security information, such as IP address, browser information and server logs; and
• analytics and cookie-preference information if analytics are introduced and you consent to their use.

Please do not submit confidential, sensitive or special-category personal information through the general contact form unless we have specifically asked you to provide it.

3. How we use personal information

Responding to enquiries

We use contact and enquiry information to respond to you, understand a potential opportunity and take steps you request before entering into a contract. Our lawful bases are legitimate interests and, where applicable, steps taken at your request before a contract.

Providing services and managing relationships

Where we work together, we use information to provide services, communicate, manage projects, maintain records and administer the relationship. Our lawful bases are performance of a contract, legitimate interests and compliance with legal obligations.

Security and website administration

We may process limited technical information to operate, maintain and protect the website and associated systems. Our lawful basis is our legitimate interest in maintaining secure and reliable services.

Analytics

If website analytics are introduced, non-essential analytics technologies will only be activated where required consent has been obtained. You will be able to refuse or withdraw that consent.

4. Contact-form information

Information submitted through our contact form is stored within the website’s form system and sent by authenticated email to Lumina Education. It is used only to review and respond to your enquiry and, where relevant, develop a professional or contractual relationship.

5. Cookies and similar technologies

The website may use essential technologies required for security, form operation and website administration. These do not require consent where they are strictly necessary.

If we introduce non-essential analytics or other tracking technologies, we will provide appropriate information and a consent mechanism before those technologies are activated.

6. Who receives your information

We may use trusted service providers that support website hosting, security, email, information technology and professional administration. These providers may process personal information only as needed to provide their services.

Relevant providers currently include:

• our website hosting and security provider;
• Microsoft 365, which provides business email services;
• WordPress and the website tools used to operate the contact form; and
• professional advisers where their services are reasonably required.

We may also disclose information where required by law, regulation, court order or a competent authority. We do not sell personal information.

7. International transfers

Some service providers may process information outside the United Kingdom. Where this occurs, we take reasonable steps to ensure that appropriate legal safeguards are used, such as an adequacy regulation or approved contractual protections.

8. How long we retain information

General enquiries that do not lead to an ongoing relationship are normally retained for up to 12 months after the last substantive contact and are then deleted or anonymised.

Where an enquiry develops into a client, contractual or professional relationship, relevant information may be retained for longer where needed to deliver services, establish or defend legal claims, or comply with contractual, accounting and legal obligations. Financial and contractual records are generally retained for at least six years where required.

Technical and security records are retained in accordance with the applicable provider’s operational and security-retention arrangements.

9. How we protect information

We use proportionate technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse or disclosure. No internet-based system is completely secure, but we regularly review the measures relevant to our operations.

10. Your data-protection rights

Depending on the circumstances, you may have the right to:

• request access to your personal information;
• ask us to correct inaccurate or incomplete information;
• request deletion of information;
• request restriction of processing;
• object to processing based on legitimate interests;
• request transfer of certain information; and
• withdraw consent where processing is based on consent.

These rights are subject to legal conditions and exemptions. To make a request, contact hello@luminaeducation.uk .

11. Complaints

Please contact us first if you have concerns about our use of your information. You also have the right to complain to the UK Information Commissioner’s Office.

Visit ico.org.uk/make-a-complaint for further information.

12. Changes to this notice

We may update this notice when our services, website technologies or legal obligations change. The latest version will be published on this page with its revision date.