Privacy Policy

Last updated: 5 May 2026

0. Brand

This privacy policy applies to the website and services provided under the commercial brand LUME3D.

1. Data Controller

2. Data We Collect

We collect only the data you voluntarily provide through our brief form or when contacting us by email:

• Name · to address you personally
• Email · to reply to your inquiry
• Organisation (optional) · to understand context
• World · to route the brief
• Brief · the content of your inquiry

We use localStorage to store browser preferences (language, theme, cookie acknowledgement). No personal data, no tracking.

3. Purpose of Processing

Your data is processed solely to respond to business inquiries submitted through the form or the email link.

4. Legal Basis

We process your data under Article 6(1)(f) GDPR · legitimate interest. Our legitimate interest is responding to potential clients who voluntarily reach out for business purposes.

5. How We Process Your Data

The brief form opens your default email client with a pre-filled message addressed to hello@lume3d.pt. The form does not store data on any server. The data exists only as an email in our inbox once you send it.

6. Third-Party Processors

• Vercel (Vercel, Inc., US) · website hosting. Standard server logs (IP, user agent). Privacy Policy
• SuperSplat / PlayCanvas (Snap Inc., US/UK) · scene-thumbnail images load from s3-eu-west-1.amazonaws.com/images.playcanvas.com when the Six Worlds grid is rendered; full interactive scenes are loaded inside an iframe from superspl.at only when you click a card. Privacy Policy
• Hugging Face (Hugging Face, Inc., US) · used by the optional hero scene loader when activated. Privacy Policy
• jsDelivr (Prospect One sp. z o.o., PL) · public CDN serving the open-source 3D rendering library used to display scenes. Privacy Policy

7. International Transfers

Some third-party processors are based in the United States. Transfers are covered by Standard Contractual Clauses (SCCs) as adopted by the European Commission, in accordance with Article 46(2)(c) GDPR.

8. Data Retention

• Brief / email data · retained in our inbox for up to 24 months, then deleted.
• localStorage · stored in your browser only; clear it any time via browser settings.

9. Your Rights

Under GDPR, you have the right to:

• Access · request a copy of your personal data
• Rectification · correct inaccurate data
• Erasure · request deletion of your data
• Restriction · limit how we process your data
• Portability · receive your data in a structured, machine-readable format
• Objection · object to processing based on legitimate interest

To exercise any of these rights, contact hello@lume3d.pt. We respond within 30 days.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with the Portuguese data protection authority:

11. Cookies & Tracking

This website does not use cookies, analytics, or any third-party tracking scripts. Browser-stored preferences (language, theme, cookie acknowledgement) live entirely on your device and are never transmitted.

12. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision.

13. Contact