Privacy policy
Last updated 6 November 2026
This policy explains what personal data Elumina handles, why, and what you can do about it. Elumina is run by DarkForge Labs Ltd (company number 17033392), 19 Beehive Way, Bawdeswell, Dereham, NR20 4WH, England. In this policy “we” means DarkForge Labs Ltd.
Two kinds of data
- Your account. When a business signs up, we hold the details of its owners and staff so they can use Elumina. For this data we are the controller.
- Your customers. When a venue sells a ticket, a membership or a booking through Elumina, the venue decides what it collects and why. The venue is the controller and we process that data on its behalf, under our terms. If you booked with a venue, contact the venue first about your data.
What we collect
| Data | Why | Lawful basis |
|---|---|---|
| Name, email address and password, or your Google account’s name and email if you sign in with Google | To create your account and let you sign in | Contract |
| Business name, sites, staff names, roles and till PINs | To run the till and back office for your business | Contract |
| Billing details for your Elumina subscription | To charge for Elumina. Card details are held by Stripe, never by us | Contract |
| Emails you send to support | To answer you | Legitimate interests |
| How the back office and till are used, and error reports | To fix faults and improve Elumina | Legitimate interests |
We do not sell personal data, and we do not use it for advertising.
Who we share it with
We use these providers to run Elumina. Each one handles data only on our instructions.
| Provider | What for |
|---|---|
| Supabase | Database and sign-in. Data is stored in London. |
| Vercel | Hosting the websites |
| Stripe | Elumina subscriptions, and card payments for venues that use Stripe |
| Dojo | Card payments for venues that use Dojo |
| Resend | Sending emails such as booking confirmations |
| PostHog (EU) | Usage analytics and error reports |
| Sign in with Google, if you choose it |
Some of these providers may process data outside the UK. When they do, the transfer is covered by UK adequacy regulations or the UK International Data Transfer Agreement.
Google sign-in
If you sign in with Google, we receive your name, email address and profile picture from Google. We use them only to create and sign in to your Elumina account, and we do not ask for access to anything else in your Google account.
Cookies
This website sets no cookies. The Elumina back office and till use cookies that keep you signed in. Venue booking pages ask before setting any analytics cookies.
How long we keep it
We keep account data while your account is open. When a business closes its account, we delete its data within 90 days, except sales and billing records, which we keep for six years because UK tax law requires it.
Your rights
You can ask to see, correct, delete or move your personal data, and you can object to how we use it. Email support@elumina.co.uk and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes
If we change this policy, we will update the date at the top and tell account holders about material changes by email.