Last updated: 28 April 2026
Who we are: This website is operated by Leonida Gennaro, a sole trader based in Manchester, UK. Contact: leonidagennaromedia@gmail.com · +44 (0)7874 372697.
1. What data we collect
We may collect and process the following personal data:
- Contact and enquiry data — your name, email address, phone number and any information you submit via the /brief enquiry form or direct contact.
- Payment data — if you purchase a digital product (Luminous Insight, Production Forge), your payment is processed by Stripe. We do not store card numbers; Stripe handles all payment data under its own privacy policy (stripe.com/gb/privacy).
- Account data — if you sign in via Google (for Luminous Insight), we receive your name, email address and Google profile picture via Firebase Authentication.
- Usage data — pages visited, browser type, device type, approximate location (country/city level). Collected via Google Analytics (if enabled) and Google AdSense.
- Cookies and similar technologies — see Section 5 below.
2. How we use your data
- To respond to your project brief or enquiry
- To process and fulfil digital product purchases
- To manage your account and product entitlements
- To deliver and improve the Luminous Insight and Production Forge applications
- To send transactional emails (purchase confirmations, access details)
- To display relevant advertising via Google AdSense
- To comply with legal obligations
3. Legal basis (UK GDPR)
- Contract performance — processing your brief or delivering a purchased product
- Legitimate interests — improving the site, preventing fraud, responding to enquiries
- Consent — for non-essential cookies and advertising (you may withdraw at any time)
- Legal obligation — retaining financial records as required by HMRC
4. Third-party services
We use the following third-party processors. By using this site you acknowledge that data may be transferred to and processed by these services:
5. Cookies
We use the following categories of cookies:
- Essential cookies — required for the site to function (e.g. session state, payment flow). Cannot be disabled.
- Analytics cookies — help us understand how visitors use the site (e.g. Google Analytics). Loaded only with your consent.
- Advertising cookies — used by Google AdSense to display relevant ads. Loaded only with your consent.
- Preference cookies — remember your cookie choices and app preferences.
You can manage your cookie preferences via the banner shown on your first visit, or by clearing your browser cookies at any time.
6. Data retention
- Enquiry/brief data — retained for 2 years from submission, then securely deleted.
- Account and entitlement data — retained while your account is active, plus 1 year after closure.
- Financial/payment records — retained for 7 years as required by UK law (HMRC).
- Analytics data — retained in aggregate form only, as per Google's data retention settings.
7. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (subject to legal retention requirements)
- Restriction — ask us to restrict processing of your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — withdraw cookie/marketing consent at any time
To exercise any of these rights, email leonidagennaromedia@gmail.com. We will respond within 30 days.
8. Data security
We implement appropriate technical and organisational measures to protect your personal data, including:
- HTTPS encryption on all pages
- Firebase security rules restricting database access to authenticated users
- Stripe handling all card data in a PCI-DSS compliant environment
- No plaintext password storage (Google SSO only)
9. International transfers
Some of our third-party processors (Google, Stripe) may transfer data outside the UK/EEA. Where this occurs, transfers are protected by appropriate safeguards such as Standard Contractual Clauses or adequacy decisions by the UK ICO.
10. Children
This site is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance of the updated policy.
12. Contact & complaints
For any privacy questions or to exercise your rights, contact:
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113.