Privacy Policy

1. Who We Are

This website is operated by Joshua Thomson, trading as LumQuor, a UK-based sole trader providing 3D printing and design services. References to "I", "me", "we", or "LumQuor" in this policy all refer to Joshua Thomson.

Contact: contact@joshthomson.co.uk

2. What Information I Collect

When you use the contact form, I collect:

• Your name
• Your email address
• Project type and budget range (if provided)
• The message you write

Automatically collected data: Like most websites, this site collects basic server log data (IP address, browser type, pages visited, timestamps) for security and debugging purposes. This is standard hosting infrastructure and is not used for profiling.

Analytics: This site uses Matomo, a self-hosted, privacy-respecting analytics platform. Matomo is configured to anonymise IP addresses and does not share data with third parties. No cross-site tracking takes place.

3. How I Use Your Information

I use the information you submit via the contact form solely to:

• Respond to your enquiry
• Provide the 3D printing service you've requested
• Send you a quote or follow-up related to your project

I will never use your contact details to send unsolicited marketing emails. If you become a returning client and I want to send occasional updates, I will ask your explicit permission first.

4. Who I Share Data With

I do not sell, rent, or trade your personal data. Your information may be processed by:

• My hosting provider — for the purposes of running this website (server infrastructure only)
• Google reCAPTCHA — the contact form uses Google's reCAPTCHA v2 to prevent spam. By submitting the form you agree to Google's Privacy Policy and Terms of Service.

5. Cookies

This site uses minimal cookies:

• Session cookie — a temporary PHP session cookie used to protect the contact form against CSRF attacks. It expires when you close your browser.
• Theme preference — a localStorage entry saving your light/dark mode preference. This never leaves your device.
• Matomo analytics — a first-party analytics cookie used to distinguish visits. No personal data is sent to third parties.

No advertising cookies, social media tracking pixels, or cross-site tracking cookies are used.

6. Data Retention

Enquiry emails are retained for as long as they are relevant to an active or recent client relationship, and deleted when no longer needed. Server logs are retained for up to 90 days. Analytics data is retained for up to 13 months.

7. Your Rights (UK GDPR)

Under the UK General Data Protection Regulation you have the right to:

• Access the personal data I hold about you
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict or object to processing
• Data portability — receive your data in a machine-readable format

To exercise any of these rights, email contact@joshthomson.co.uk. I'll respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Security

This website is served over HTTPS. Contact form submissions are protected by CSRF tokens and Google reCAPTCHA. I follow reasonable security practices for a business of this size, including keeping software up to date and using strong credentials for any backend access.

9. Changes to This Policy

If I make material changes to this policy, I'll update the "Last updated" date at the top of this page. Continued use of the website after changes constitutes acceptance.

10. Contact

Questions about this privacy policy? Email contact@joshthomson.co.uk and I'll get back to you promptly.