Privacy Policy

Effective Date: 1st April 2012

Last Updated: 5th November 2026

1. Introduction
Welcome to Opus Lumière. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, www.opuslumiere.com (the “Website”).

By using our Website, you agree to the collection and use of your personal data in accordance with this policy. If you do not agree, please refrain from using our services. This policy complies with the applicable data protection regulations, including the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018.

2. Information We Collect
We may collect and process the following types of information:

Personal Information: This includes your name, email address, phone number, postal address, and any other details you provide when contacting us, subscribing to our newsletters, or booking our services.
Technical Data: This includes your IP address, browser type, operating system, referral source, browsing behaviour and usage data collected through cookies, tracking pixels and analytics tools. The optional ones only if you allow them (see Section 6).
Visitor Location Statistics: We record anonymous, aggregated statistics about the entry page of each visit and an approximate visitor location - country, city, and the outward part of the postcode (the area prefix, for example “SW1”). This approximate location is derived from your IP address at the time of your visit; your IP address itself is not stored. No cookies are used for this, no individual profiles are created, and the information is kept only as aggregate counts that are not used to identify individual visitors.
Cookie-free visit statistics: our website also keeps its own simple statistics, without cookies and without storing anything on your device. For each page you view, we record the page’s address, the website or search engine that sent you (its name only, such as google.com), any campaign tag in the link (for example from one of our adverts), how long the page was on screen, how far down you scrolled, whether you started or sent our enquiry form (never what you typed), the type of device (mobile, tablet or computer) and your country. To tell one visit from another without cookies, we combine your IP address and browser details with a random key that is replaced every day and keep only the resulting code. Your IP address itself is not stored, and because the key is deleted each day, your visits can’t be linked from one day to the next.
Payment Information: If you make a purchase, your payment details (such as credit/debit card information) are processed securely through a third-party payment provider. We do not store payment details on our servers.
Orders in your Lumière Room: what you order (the photographs, sizes, crops and options you choose, and any words for a card or album), your delivery address and a mobile number for the courier, and any photographs you send us of a piece that arrived damaged.
User-Generated Content: If you interact with our website by leaving comments, submitting reviews, or uploading files, we may collect and store this information.

3. How We Use Your Information
We use your information for the following purposes:

To provide, manage, and deliver our photography services.
To make and deliver the prints, albums and other pieces you order, and to put right anything that arrives damaged, because that is our contract with you.
To respond to your inquiries, requests, and customer service interactions.
To send you booking confirmations, invoices, and service-related updates.
To improve our website, services, and user experience through analytics and feedback.
To see which of our marketing works: when you send an enquiry, we note how that visit reached our website (for example a Google search or one of our adverts) and the page it started on. If you then book with us, we link the booking to that enquiry using your email address. We do this because we have a legitimate interest in understanding which marketing brings us clients.
To personalize marketing efforts and send promotional materials (if you have opted in).
To comply with legal obligations and enforce our terms and policies.
To detect and prevent fraudulent activities, spam, and security threats.

4. Sharing Your Information
We do not sell or rent your personal data. However, we may share your information under the following circumstances:

Service Providers: We may share data with companies that help us run the website and our services: hosting and security (Bluehost, Cloudflare), payments (Stripe), analytics (Google Analytics, Microsoft Clarity, Jetpack Stats), advertising measurement (Google Ads), printing and delivery of orders (our print lab, which makes and posts your order, and the couriers it uses) and email (Google Workspace).
Orders delivered abroad: if you send an order outside the UK, the courier there receives your name, delivery address and phone number, only to deliver it. Where a piece is made outside the UK, the lab’s printer there receives the same, and the photographs for it. When your details leave the UK in this way, it is done with the safeguards UK data protection law requires.
Visitor-Location Lookup: To produce the anonymous visitor-location statistics described in Section 2, your IP address may be transmitted momentarily to our content-delivery provider (Cloudflare) and/or a third-party IP-geolocation service purely to determine an approximate location; it is used only for that lookup and is not stored.
Legal Compliance: We may disclose your information if required by law, legal processes, or government requests.
Business Transfers: In the event of a business merger, acquisition, or sale, your information may be transferred to the new entity.
Marketing Partners: With your consent, we may share data with partners for promotional purposes.

5. Data Security
We implement industry-standard security measures to protect your personal data from unauthorized access, misuse, loss, or alteration. This includes encryption, firewalls, and secure server configurations. However, no online platform is completely secure, and you should take necessary precautions to protect your data.

6. Cookies and Tracking Technologies
When you first visit, a banner asks whether you’re happy for us to use optional cookies. No optional cookies are used until you choose, and you can change your mind at any time with “Cookie settings” at the bottom of every page.

Necessary (always on): keep the site secure, remember your cookie choice, keep you signed in to The Lumière Room and let you make bookings.
Analytics (only if you allow): Google Analytics counts visits and how pages are used, in aggregate. Microsoft Clarity shows where people click and scroll and may record how pages are used, with anything typed into forms hidden.
Advertising (only if you allow): Google Ads measures whether our ads lead to enquiries and may show our ads to people who have visited before. We use Google Consent Mode: if you don’t allow these, Google’s tags set no cookies and send only limited signals without cookies.
Cookie-free statistics (on unless you switch them off): the statistics described in section 2 use no cookies and store nothing on your device, so the banner doesn’t ask about them. UK law allows statistics like these, used only to improve our website, as long as you can switch them off easily. You can switch them off for this browser here (your browser then keeps a note of that choice):
Cookie-free statistics are on for this browser.
Switching off also deletes what was recorded from this browser that day. They are also off automatically if your browser sends Global Privacy Control or Do Not Track, or doesn’t let websites keep settings.

You can change your choice at any time with “Cookie settings” at the bottom of every page, or by deleting cookies in your browser.

7. Your Rights
Depending on your location, you may have the right to:

Request access to your personal data.
Correct inaccurate or outdated information.
Request deletion of your data where applicable.
Object to data processing for direct marketing purposes.
Withdraw consent where processing is based on consent.

To exercise these rights, contact us at contact@opuslumiere.com.

8. Third-Party Links
Our website may contain links to external sites. We are not responsible for their privacy practices and encourage you to review their policies before providing any personal data.

9. Data Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this policy unless a longer retention period is required by law. When no longer needed, we securely delete or anonymize the data. Aggregated, anonymous visitor-location statistics are automatically deleted after 24 months. Google Analytics keeps event-level data for 14 months. Microsoft Clarity keeps recordings for 30 days. Our cookie-free statistics keep page-by-page records for 90 days; after that only daily totals are kept. We keep the record of each order (what was ordered, where it went and what was paid) for six years, for our accounts and tax records. The print files made for an order are deleted 30 days after it is posted.

10. Photographs from your session
We take photographs of you and anyone else in your session. We use them to create and deliver your gallery and photographs, because that is our contract with you. When you order prints, albums or other pieces, we send the photographs you chose, cropped as you chose them, to our print lab to make your order. If you chose Happy to share when you booked, we also use a selection on our website, social media accounts, Google Business Profile, adverts, printed marketing and award entries, and we share a selection with partner businesses we work with, who use them on their own websites, social media and adverts; each partner is responsible for its own use. You can ask us which partners have received your photographs. You can withdraw your consent at any time by emailing contact@opuslumiere.com, and we’ll ask our partners to remove anything we’ve shared with them. Withdrawing doesn’t affect any use before you told us. Photographs we post on social media and Google are also subject to those platforms’ own terms. For children, a parent or guardian makes this choice. We keep the files from your session for 2 years, so that we can supply them again if needed, and then we delete them. This doesn’t include the finished photographs in your archive, which we keep for you, as your Lumière Room explains.

11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, business operations, or industry standards. Any updates will be posted on this page with a revised effective date.

12. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at:

Opus Lumière
Email: contact@opuslumiere.com
Phone: +44 7444 665 739