Privacy Policy

1. Who we are

Luma Market Ltd is the data controller for the personal data described here. We are registered in England and Wales under company number 17253777, with our registered office at 82a James Carter Road, Mildenhall, IP28 7DE, United Kingdom.

For anything about your data, email us at [email protected].

2. What we collect

If you join the waitlist, we collect your email address and whether you told us you are a maker, a shopper, or both.

If you answer one of our surveys, we collect the answers you give. Depending on the survey, those cover things like what you make, how long you have been selling, where you currently sell or shop, what frustrates you, what you would need from a marketplace, and any free-text comments you write. The survey also asks for your email address so we can keep you posted. That question is optional, and you can complete the survey without answering it.

However you arrive, our host records the technical details any web server needs to serve a page, including your IP address. We do not use these to build a profile of you and we do not connect them to your form answers.

We do not collect payment details, and there are no accounts on this site. Please do not put sensitive personal information into the free-text boxes, since we have no need for it.

3. Why we use it, and our lawful basis

Our lawful basis for all of it is your consent, under Article 6(1)(a) of the UK GDPR. You give it by choosing to join the waitlist or to submit a survey, and you can withdraw it at any time.

• Your email address is used to tell you when Luma launches and to send occasional updates about how it is going.
• Your survey answers are used to work out what to build and how the marketplace should behave. We report on them in aggregate, for example on our blog. We do not publish anything that identifies you.
• Whether you are a maker or a shopper is used only to send you the updates relevant to you rather than all of them.

Withdrawing consent is meant to be easy. Every email we send has an unsubscribe link, and you can email [email protected] to ask us to delete your survey response too. Withdrawing does not affect anything we did with your data before you withdrew.

4. Who we share it with

We do not sell your data, and we do not share it for anyone else’s marketing. We use a small number of service providers who process it on our behalf, under contract and on our instructions only:

• MailerLite, which stores our mailing list and sends our emails. Your email address and your maker or shopper role go here.
• Google, where survey responses are recorded in a private spreadsheet that only we can open.
• Vercel, which hosts this website. As with any web host, its servers handle your submission in transit and record technical details such as your IP address in their logs, so that pages load and the site stays secure.

That is the complete list. We may also disclose data where the law requires it.

5. Where your data is stored

Our providers are based in, or process data in, countries outside the UK, including the United States and the European Economic Area. Where data leaves the UK we rely on the safeguards the UK GDPR requires for international transfers, such as UK adequacy regulations or the UK Addendum to the EU Standard Contractual Clauses. Ask us and we will tell you which applies to a given provider.

6. How long we keep it

• Waitlist emails: until you unsubscribe or ask us to delete them. If Luma never launches, we will delete the list and tell you we have.
• Survey responses: up to 24 months from the date you submit, because they inform what we build. We remove the email address from a response sooner if you ask.

7. Your rights

Under the UK GDPR you have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. You can also withdraw your consent at any time.

Email [email protected] and we will respond within one month. There is no charge.

8. Cookies

This site sets no cookies. We use no analytics, no advertising pixels and no third-party trackers, so there is nothing here to consent to and no banner to dismiss. If that changes, we will ask you first and update this policy.

9. Children

This site is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us their details, email us and we will delete them.

10. Changes to this policy

If we change how we handle your data, we will update this page and the date at the top. If the change is significant, we will tell the people on our list directly.