Legal

Privacy Policy

This Privacy Policy explains how Illume Ltd collects and uses personal information when you use the ILLUME Cinematic Universe website.

Last updated: February 2026

We aim to keep this easy to read and genuinely useful. If you have any questions about how we handle your personal data, please contact us at hello@illumeuniverse.com.

01

Who We Are (Data Controller)

The Site is operated by Illume Ltd, a company registered in England and Wales.

02

What Personal Information We Collect

A) Information you give us

Mailing list / newsletter

  • Email address (and any other fields you choose to provide, e.g., name)
  • Your marketing preferences (e.g., opt-in)

When you contact us

  • Your name (if provided), email address, and the content of your message

B) Information we collect automatically

When you use the Site, we may collect:

  • IP address, device type, browser type, operating system
  • Pages viewed, approximate location (derived from IP), referral source
  • Security and performance logs
03

How We Use Your Information (and Our Lawful Bases)

UK GDPR requires a lawful basis for processing personal data. We use your information for:

A) Mailing list and updates

Purpose: Send you ILLUME news, announcements, launches, and updates.

Lawful basis: Consent (you can unsubscribe any time).

B) Responding to messages

Purpose: Reply to enquiries, provide information you request, manage communications.

Lawful basis: Legitimate interests (running and supporting our business) and/or Contract.

C) Running, securing, and improving the Site

Purpose: Keep the Site working, diagnose issues, prevent abuse/fraud, and improve content and performance.

Lawful basis: Legitimate interests (maintaining a secure, functional website).

D) Legal and compliance

Purpose: Comply with legal obligations, handle complaints, enforce our rights.

Lawful basis: Legal obligation and/or legitimate interests.

04

Marketing Preferences (Email)

We only send marketing emails where we have a valid basis under PECR and UK GDPR — usually opt-in consent for individuals.

You can opt out at any time by:

  • Clicking Unsubscribe in any email, or
  • Emailing hello@illumeuniverse.com
05

Cookies and Analytics

We may use cookies and similar technologies for:

  • Essential site functions (security, load balancing)
  • Remembering preferences
  • Measuring site usage (analytics), if enabled

Under PECR, non-essential cookies generally require consent. See our Cookie Policy for full details.

06

Who We Share Your Information With

We may share personal information with trusted service providers who help us operate the Site, such as:

  • Hosting / infrastructure: Vercel
  • Email/newsletter provider: [provider]
  • Analytics provider (if used): [provider]
  • Security / monitoring (if used): [provider]

They act as processors and are only permitted to use your data to provide services to us. We may also disclose data if required by law, regulation, or court order, or to protect rights, safety, and prevent fraud or abuse.

07

International Transfers

Some of our suppliers may process data outside the UK (for example, in the US or EU). Where this happens, we use appropriate safeguards such as UK adequacy regulations (where applicable) or contractual safeguards (e.g., UK IDTA / Addendum to EU SCCs), plus risk assessments where needed.

08

How Long We Keep Your Information

We keep personal information only as long as necessary:

  • Newsletter: until you unsubscribe (and for a short period after to maintain a suppression list).
  • Enquiries: for as long as needed to respond and then a reasonable period for records (typically up to 24 months, unless needed longer for disputes or legal reasons).
  • Server logs / security logs: kept for a limited period for troubleshooting and security.
09

Keeping Your Data Secure

We use appropriate technical and organisational measures to protect personal information (e.g., access controls, least-privilege, secure configuration, and supplier due diligence). No system is 100% secure, but we work to reduce risk.

10

Your Data Protection Rights

You have rights under UK GDPR, including:

  • Right to be informed
  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Rights related to automated decision-making and profiling (if applicable)

To exercise your rights, email hello@illumeuniverse.com. We may need to confirm your identity before responding.

11

Children

The Site is not intended for children under 13 to sign up to mailing lists or submit personal information without parental authorisation. The UK age limit for consent in the context of online information society services is 13. If you believe a child has provided personal data without appropriate consent, contact us and we will take steps to delete it.

12

Third-Party Sites and Social Media

The Site links to third-party platforms (Instagram, TikTok, YouTube, X). Those services have their own privacy policies and cookies. We are not responsible for their practices — please review their policies before using them.

13

Complaints

If you are unhappy with how we handle your data, please contact us first at hello@illumeuniverse.com. You also have the right to complain to the UK supervisory authority: the Information Commissioner's Office (ICO) at ico.org.uk.

14

Changes to This Privacy Policy

We may update this policy from time to time. We will post the updated version on this page and change the “Last updated” date at the top.