Privacy.

Luminous is operated from the United Kingdom. For anything in this notice, write to home@luminousm514.com. We are the data controller for the personal data described below.

Applications. Name, email address, discipline, portfolio link, and the notes you choose to include. A person reads these to decide admission. Lawful basis: the steps you ask us to take toward membership (contract).

Accounts. Email address and a password, held by our authentication provider. Approved members also hold a public profile they control. Lawful basis: contract.

Patronage. When you give, your bank details go directly to GoCardless on their own pages. They never pass through or rest on our servers. We initiate the payment amount and see its outcome. Lawful basis: contract, and our legitimate interest in preventing abuse of the checkout.

We run no analytics, no advertising, and no tracking. The only cookies set are the strictly necessary ones that keep a member signed in, which is why this site shows no cookie banner.

Supabase (database and authentication), Vercel (hosting), GoCardless (payments), and Resend (transactional email). Each acts under its own data processing agreement, and some process data outside the UK under recognized transfer safeguards. GoCardless is a controller in its own right for the payment data you give it.

Accounts and profiles: for as long as the account exists. Applications that don't move forward: up to twelve months, then removed. Payment records: as long as financial record-keeping requires.

You can ask for a copy of your data, ask us to correct it, delete it, restrict it, or hand it to you to take elsewhere. Write to the address above and we will answer within one month. If we fall short, you can complain to the Information Commissioner's Office at ico.org.uk.