Privacy Policy

1. Who We Are

Luminary Photography CIC (“we”, “us”, “our”) is a Community Interest Company registered in England and Wales (Company No: 14586558). We are dedicated to using photography for social impact across Sunderland and the North East.

We are the “data controller” responsible for any personal information collected through our website.

2. What Personal Information We Collect and Why

We keep our data collection to a minimum. We collect personal information in two ways:

A. Information You Provide Directly (Newsletter Signup)

When you subscribe to our newsletter, we collect your email address (and name, if provided).

  • Purpose: To send you occasional updates about our community projects, workshops, news, and services.
  • Email Service Provider: Our newsletter is managed through Mailchimp (Intuit Inc.). When you subscribe, the information you provide is transferred to Mailchimp for processing in accordance with their Privacy Statement and Terms.
  • Lawful Basis: Consent. You can withdraw your consent at any time by clicking the “Unsubscribe” link at the bottom of any newsletter email or contacting us directly at theoffice@luminary.org.uk.

B. Automated Information & Analytics (Google Analytics)

When you browse our website, we use Google Analytics to gather anonymised information about how visitors use our site (e.g. pages visited, time spent on pages, general location/device type).

  • Purpose: To measure web traffic and help us improve site accessibility and user experience.
  • Data Privacy: This data is aggregated and anonymised. We do not use Google Analytics to identify individuals.
  • Lawful Basis: Legitimate Interests (improving our services) / Consent (for analytical cookies).

3. Cookies

Our website uses small text files called cookies to improve your experience and gather traffic statistics.

  • Essential Cookies: Necessary for the basic functionality of the website.
  • Analytics Cookies: Placed by Google Analytics to help us understand how visitors interact with the site.

You can manage or disable cookies at any time through your web browser settings.

4. Embedded Content From Other Websites

Pages on this site may include embedded content (such as videos, social media feeds, or interactive maps). Embedded content from other websites behaves in the exact same way as if you had visited the other website directly.

These third-party websites (e.g. YouTube, Vimeo) may collect data about you, use cookies, embed additional tracking, and monitor your interaction with that content according to their own privacy policies.

5. Sharing Your Information

We never sell, rent, or trade your personal information.

We only share data with trusted third-party service providers who assist us in running our operations, strictly under robust data protection standards:

  • Mailchimp: To securely store our subscriber list and distribute our newsletters.
  • Google Analytics: To collect anonymised web statistics.
  • Legal Requirements: We may disclose information if required to do so by UK law or regulation.

Where data is processed outside the UK (such as by Mailchimp in the United States), appropriate legal safeguards are in place, including Standard Contractual Clauses (SCCs) and the UK International Data Transfer Agreement (IDTA), to ensure your information receives the same level of protection as it does in the UK.

6. How Long We Keep Your Data

  • Newsletter Data: We retain your details on Mailchimp until you unsubscribe or ask us to remove you from our mailing list.
  • Analytics Data: Google Analytics data is retained according to standard retention periods and then automatically deleted.

7. Your Data Protection Rights (UK GDPR)

Under UK data protection law, you have rights regarding your personal information, including:

  • Right to Access: You can request copies of your personal information.
  • Right to Rectification: You can ask us to correct inaccurate or incomplete information.
  • Right to Erasure: You can ask us to delete your personal information (“right to be forgotten”).
  • Right to Restrict or Object: You can object to or ask us to limit how we process your data.

To exercise any of these rights, please email us at theoffice@luminary.org.uk. We will respond within one calendar month.

8. How to Contact the Regulator

If you have concerns about how we handle your data, please contact us first so we can help.

If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK regulator for data protection:

Helpline: 0303 123 1113

Website: https://ico.org.uk