Skip to content

How Lune Studio Ltd collects, uses and stores personal data, and the rights you have over it under UK GDPR.

Lune Studio Ltd (company number 16280254, 36 High Street, Market Harborough, LE16 7NL) is the data controller for the personal data described here. If you have a question about any of it, email hello@lune-studio.co.uk.

What we collect

  • Enquiry details you send us — name, email address, company, budget range and the message itself
  • Client project data — contact details for the people we work with, and access credentials for systems you ask us to work on
  • Website analytics — aggregated, non-identifying information about how pages are used
  • Correspondence — emails, call notes and documents relating to a project

Why we hold it

Enquiry data is used to reply to you and, if we work together, to run the project. Our lawful basis is legitimate interest for responding to an enquiry, and contract performance once a project is agreed. Analytics is used to understand which pages are useful. We do not sell data, and we do not share it for advertising.

How long we keep it

  • Enquiries that do not become projects — 12 months, then deleted
  • Client project records — 7 years after the final invoice, to meet UK accounting requirements
  • Credentials — removed from our systems at project close unless you ask us to retain access for support

Who we share it with

Only the processors needed to run the studio: email and file hosting, our accounting software, and — where a project requires it — the trusted specialists we bring in, who are bound by the same confidentiality terms. Where a provider stores data outside the UK, transfers are covered by an adequacy decision or standard contractual clauses.

Your rights

Under UK GDPR you can ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to how we use it, or ask us to restrict processing. Email hello@lune-studio.co.uk and we will respond within one month. If you are unhappy with the response, you can complain to the Information Commissioner's Office at ico.org.uk.

Security

Accounts are protected with unique passwords and two-factor authentication where the provider supports it. Client credentials are stored in an encrypted password manager and shared through it rather than by email.

Questions about any of this? Email hello@lune-studio.co.uk.