Privacy Policy | Lumaris Studio

Last Updated: February 1st, 2026

1. INTRODUCTION

OneCodeToRuleAll DOO, trading as "Lumaris Studio" ("we," "us," "our"), is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you:

• Visit our website at lumaris-studio.com

• Use our client portal, EditWise

• Engage our video production services

• Schedule a consultation through our booking system

• Communicate with us via email or other channels

Please read this Privacy Policy carefully. By accessing our website, using our services, or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy.

‍

2. DATA CONTROLLER

The data controller responsible for your personalinformation is:

OneCodeToRuleAll DOO

Trading as: Lumaris Studio

Address: Sinđelićeva 6, 19000Zaječar, Serbia

Company Registration Number: 21564516

Tax Identification Number (PIB): 111898813

Email: contact@lumaris-studio.com

Phone: +381 60 130 9939

‍

3. INFORMATION WE COLLECT

We collect different types of information depending on how you interact with us:

3.1 Information You Provide Directly

Consultation Booking

When you schedule a consultation through our Calendly booking widget, you may provide:

• Your name

• Email address

• Company name

• Responses to qualifying questions about your business

Note: This information is collected and stored by Calendly, Inc. according to their privacy policy. We receive this information via email notification to process your booking request.

Client Onboarding

When you become a client, we collect information necessary to provide our services and process payments:

• Company legal name and registration details

• Business address

• Tax identification numbers (VAT, etc.)

• Primary contact name and email

• Billing contact information

• Payment information (PayPal email or bank transfer details)

EditWise Platform Registration

When you or your team members are registered on our EditWise client portal, we collect:

• Email addresses of authorized users

• Names (optional, for display purposes)

• Company association

EditWise uses passwordless authentication. We do not collect or store passwords. Users authenticate via a secure sign-in code sent to their registered email address.

3.2 Information Collected Automatically

Website (lumaris-studio.com)

Our website is hosted on Webflow. We do not actively collect personal information through our website beyond what you voluntarily provide. Webflow may collect certain technical information as part of hosting services, including:

• IP addresses (for security and performance)

• Browser type and version

• Device information

• Pages visited and time spent

We may introduce analytics tools (such as Google Analytics) in the future to better understand website usage. If we do, this Privacy Policy will be updated accordingly.

EditWise Platform

When you use EditWise, we automatically collect:

• Login timestamps and authentication events

• Activity logs (actions taken within the platform)

• IP addresses

• Browser and device information

3.3 Information from Third Parties

We may receive information about you from third-party sources:

• Calendly: Booking details when you schedule a consultation

• PayPal: Payment confirmation and transaction details

• Publicly Available Sources: Business contact information from company websites, LinkedIn, or other public sources for the purpose of business development outreach

‍

4. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

4.1 Service Delivery

• To provide our video production services

• To create and manage your EditWise account

• To communicate with you about projects, deliverables, and feedback

• To send automated notifications about project updates and messages

• To provide customer support

4.2 Business Operations

• To process payments and send invoices

• To maintain business records and comply with legal obligations

• To enforce our Terms of Service and other agreements

• To schedule and conduct consultations

4.3 Business Development

• To conduct outreach to potential clients using publicly available business contact information

• To respond to inquiries and requests for information

4.4 Security and Improvement

• To protect against fraud, unauthorized access, andother security threats

• To monitor and improve the performance of our services and platforms

• To analyze usage patterns and enhance user experience

‍

5. LEGAL BASIS FOR PROCESSING (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar data protection laws, we process your personal information based on the following legal grounds:

Contractual Necessity - To perform our services under a contract with you (e.g., delivering video production services, managing your EditWise account)

Legitimate Interests - For business development outreach, improving our services, ensuring security, and internal analytics (where such interests are not overridden by your rights)

Legal Obligation - To comply with tax, accounting, and other legal requirements

Consent - Where required by law for specific processing activities (you may withdraw consent at any time)

‍

6. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We may share yourinformation with the following categories of recipients:

6.1 Service Providers

We use third-party service providers to help us operate our business:

Microsoft Azure - Cloud hosting for EditWise platform for all EditWise data.

Calendly - Consultation scheduling (name, email, company, booking details).

PayPal - Payment processing (payment and billing information)

Google (Gmail) - Email communication (email content and addresses)

Webflow - Website hosting (technical website data)

Instantly.io - Business development outreach (business contact information)

6.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

6.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6.4 With Your Consent

We may share your information with other third parties when we have your explicit consent to do so.

‍

7. INTERNATIONAL DATATRANSFERS

Lumaris Studio is based in the Republic of Serbia. Your information may be transferred to, stored, and processed in Serbia or other countries where our service providers operate, including the United States (Microsoft Azure, Google, PayPal, Calendly, Instantly).

If you are located in the EEA, UK, or other regions with data transfer restrictions, we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission

• Data processing agreements with our service providers

• Transfers to countries recognized as providing adequate data protection

‍

8. DATA RETENTION

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

Client Materials & Project Files - 30 days after project completion or termination

Invoices & Financial Records - As required by Serbian tax law (typically 5-10 years)

EditWise Account Data - Duration of client relationship + 30 days

Consultation Booking Data - Stored by Calendly per their retention policy

Business Development Contact Data - Until you request removal or the data is no longer needed

After the applicable retention period, we will securely delete or anonymize your personal information.

‍

9. COOKIES AND TRACKING TECHNOLOGIES

9.1 Our Website

Our website (lumaris-studio.com) is hosted on Webflow, which may use essential cookies for basic functionality and security. We do not currently use marketing cookies, advertising cookies, or social media tracking pixels.

We may introduce analytics cookies (such as Google Analytics) in the future to understand website usage. If we do, we will update this Privacy Policy and, where required by law, obtain your consent.

9.2 EditWise Platform

EditWise uses essential cookies and similar technologies necessary for:

• User authentication and session management

• Security and fraud prevention

• Platform functionality

9.3 Managing Cookies

You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website or platform.

‍

10. YOUR PRIVACY RIGHTS

Depending on your location, you may have the following rights regarding your personal information:

10.1 Rights Under GDPR (EEA and UK Residents)

• Right of Access: Request a copy of the personal information we hold about you

• Right to Rectification: Request correction of inaccurate or incomplete information

• Right to Erasure: Request deletion of your personal information (subject to legal retention requirements)

• Right to Restrict Processing: Request that we limit how we use your information

• Right to Data Portability: Request your information in a structured, machine-readable format

• Right to Object: Object to processing based on legitimate interests or for direct marketing

• Right to Withdraw Consent: Withdraw consent at any time where we rely on consent for processing

10.2 Rights Under CCPA (California Residents)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used

• Request deletion of your personal information

• Opt-out of the sale of personal information (we do not sell personal information)

• Non-discrimination for exercising your privacy rights

10.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: contact@lumaris-studio.com

Subject line: "Privacy Rights Request"

We will respond to your request within thirty (30) days, or as required by applicable law. We may ask you to verify your identity before processing your request.

10.4 Right to Lodge a Complaint

If you believe your privacy rights have been violated, you have the right to lodge a complaint with your local data protection authority. In Serbia, this is the Commissioner for Information of Public Importance and Personal Data Protection.

‍

11. OPTING OUT OF BUSINESS DEVELOPMENT COMMUNICATIONS

If you receive business development communications from us and wish to opt out:

• Reply to the email with "UNSUBSCRIBE" in the subject line

• Email us at contact@lumaris-studio.com requesting removal

• Use the unsubscribe link if provided in the email

We will process your request within ten (10) business days. Please note that opting out of business development communications does not affect transactional communications related to active client engagements.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

‍

12. DATA SECURITY

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:

• Secure cloud hosting on Microsoft Azure with enterprise-grade security

• Passwordless authentication for EditWise to eliminate password-related vulnerabilities

• Encryption of data in transit

• Access controls limiting who can access personal information

• Regular review of security practices

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

‍

13. CHILDREN'S PRIVACY

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.

‍

14. THIRD-PARTY LINKS AND SERVICES

Our website and services may contain links to third-party websites or integrate with third-party services (such as Calendly). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with your personal information.

‍

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes:

• We will update the "Last Updated" date at the top of this page

• We will notify active clients via email at least fourteen (14) days before material changes take effect

• We may post a notice on our website

Your continued use of our Services after such notice constitutes acceptance of the updated Privacy Policy.

‍

16. DO NOT TRACK SIGNALS

Some browsers offer a "Do Not Track" (DNT) feature. Because there is no accepted standard for how to respond to DNT signals, our website does not currently respond to DNT signals. As we do not actively track users for advertising purposes, this has minimal impact on your experience.

‍

17. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Lumaris Studio (A trading name of OneCodeToRuleAll DOO)

Sinđelićeva 6, 19000 Zaječar, Republic of Serbia