This Privacy Policy explains how Lumen Creative — the trading name of a sole trader established in the United Kingdom (we, us, our) — collects and uses personal data when you use our website at lumeneditor.com (the Site), join our waitlist, contact us, or buy a Lumen licence. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018) we are the controller of that personal data.
You can contact us about privacy at contact@lumeneditor.com or by post at 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London, W1T 6EB, United Kingdom. We are registered with the UK Information Commissioner’s Office (ICO) under registration number ZC180845.
1. A note on the Lumen editor
The Lumen SDK processes images and video entirely on the end user’s device, in their browser. We do not receive, store or have access to the media that people edit with it. This policy is about the personal data we handle as a business — for example through the Site and our customer relationships — not media processed on-device by the SDK. Where one of our customers embeds the SDK in their own product, that customer is the controller for their own end users’ data.
2. The personal data we collect, and why
Waitlist sign-ups
When you join our launch waitlist we collect your email address and the date you signed up, which we store in our database. We use this to contact you about availability, launch and product news. Lawful basis: your consent — you can withdraw it and unsubscribe at any time by emailing us.
Enquiries and support
When you email us or contact support, we process your email address and the contents of your message to respond and to help you. Lawful basis: our legitimate interests in responding to you and running our business, or taking steps to enter into or perform a contract with you.
Purchases
Purchases are handled by our Merchant of Record, Paddle.com Market Ltd (Paddle). Paddle collects and processes your billing and payment details as a separate, independent controller under its own privacy policy; we never see or store your full payment-card details. We receive limited order information from Paddle — such as your name, email address, country and the licence you bought — which we use to provide and support your licence and to meet our legal and tax obligations. Lawful basis: performance of a contract, and compliance with our legal obligations.
Technical data and security
Our hosting provider, Cloudflare, processes technical data such as your IP address and request metadata to deliver the Site securely and to prevent abuse — for example, short-lived rate-limiting of form submissions. We do not store your IP address alongside your waitlist sign-up. Lawful basis: our legitimate interests in security and in operating the Site reliably.
Analytics
We use Google Analytics, provided by Google LLC, to understand how the Site is used in aggregate — for example which pages are visited and how visitors arrive. Google Analytics sets cookies on your device and processes information such as a shortened version of your IP address, your device and browser type, and the pages you view. We use this only to measure and improve the Site, never to identify you personally, and we do not use it for advertising. You can read how Google handles this data in its privacy policy, and you can opt out of Google Analytics on every site using Google’s opt-out browser add-on. Lawful basis: your consent, which you give through our cookie banner and can change or withdraw at any time via the ‘Cookie settings’ link in the footer; you can also opt out using the controls above.
3. Cookies
The only non-essential cookies we set are the Google Analytics cookies described above, which help us measure aggregate Site usage. We ask for your consent through a cookie banner before setting them, and you can change or withdraw that consent at any time using the ‘Cookie settings’ link in the footer. We do not use advertising or cross-site tracking cookies, and the Lumen editor itself sets no cookies. You can also block or delete cookies through your browser settings, or opt out of Google Analytics specifically using Google’s opt-out browser add-on; declining will not affect the core functionality of the Site.
4. Who we share personal data with
We share personal data only with service providers who help us run our business, and where the law requires. These include:
- Cloudflare, Inc. — website hosting, content delivery, security and our database (privacy policy);
- Paddle.com Market Ltd — payments and Merchant-of-Record services (a separate controller);
- Google LLC — aggregate website analytics via Google Analytics (privacy policy); and
- our email provider — to send and receive email at our contact address.
We do not sell your personal data.
5. International transfers
Some of our providers (such as Cloudflare, Google and Paddle) may process personal data outside the United Kingdom. Where they do, we rely on appropriate safeguards recognised under UK data protection law — such as UK adequacy regulations, the International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses — to protect your data.
6. How long we keep it
We keep personal data only for as long as we need it:
- Waitlist data — until our launch and your onboarding, or until you unsubscribe, whichever is sooner;
- Customer and order data — for the duration of your licence and then for as long as we are required to keep records for legal, accounting and tax purposes (generally six years); and
- Correspondence — for as long as needed to deal with your query and a reasonable period afterwards.
When we no longer need personal data, we delete or anonymise it.
7. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing;
- data portability; and
- where we rely on consent, withdraw it at any time.
To exercise any of these rights, email contact@lumeneditor.com. We will respond within one month. You also have the right to complain to the ICO (the UK supervisory authority) at ico.org.uk or on 0303 123 1113 — though we would appreciate the chance to address your concern first.
8. Security
We take reasonable technical and organisational measures to protect personal data, including hosting on secure, reputable infrastructure and limiting who can access it. No system is completely secure, but we work to protect your information and will notify you and the ICO of a personal data breach where the law requires.
9. Children
The Site and our products are intended for developers and businesses and are not directed at children. We do not knowingly collect personal data from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always published here, with the ‘last updated’ date shown above.