Privacy Policy

Hydrophilic LTD - Incorporated in England and Wales. Email: simon@lightbeamevents.co.uk

We are the data controller responsible for your personal data collected through Light Beam Booth.

When you use Light Beam Booth, we collect:

• Email Address: Provided by you to receive your AI-transformed image
• Photographs: Your original photograph and the AI-transformed version
• Session Data: Date and time of booth use, scene selection, and technical logs

We do not collect names, phone numbers, payment information, or other identifying details beyond your email address and image.

• Directly from you: When you enter your email address and participate in the photo experience
• Automatically: Through the booth's camera and projection system during your session

We process your personal data under the following legal bases:

• Consent: For sending your image to your email and using your images for marketing purposes (you can withdraw consent at any time)
• Legitimate Interests: For operating the booth service, maintaining system security, and improving our technology

We use your data to:

• Deliver your AI-transformed image to your email address
• Process your photograph through our AI transformation service
• Display your images on our marketing materials, website, and social media (with your consent)
• Improve and maintain the Light Beam Booth experience
• Respond to deletion requests and other inquiries

Your data is shared with the following third-party service providers who process data on our behalf:

Google Gemini (AI Processing)

• Purpose: To transform your photograph using artificial intelligence
• Data Shared: Your original photograph
• Location: Google's servers (may include locations outside the UK/EEA)

Amazon Web Services (AWS S3)

• Purpose: Temporary cloud storage of images
• Data Shared: Your photographs (original and transformed)
• Location: AWS data centers (we use UK/EU regions where possible)

Email Service Provider

• Purpose: To deliver your transformed image to your email address
• Data Shared: Your email address and transformed image

All third-party processors are required to maintain appropriate security measures and use your data only for the purposes we specify.

Some of our service providers (particularly Google Gemini) may process your data outside the United Kingdom and European Economic Area (EEA). When this occurs:

• We ensure appropriate safeguards are in place (such as Standard Contractual Clauses)
• Google and AWS maintain certifications and commitments to data protection standards
• You acknowledge that AI processing may occur on international servers

• Images: Automatically deleted 7 days after creation
• Email Addresses: Deleted along with associated images after 7 days
• System Logs: Retained for up to 30 days for technical troubleshooting

You may request earlier deletion at any time by contacting simon@lightbeamevents.co.uk.

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (we'll delete within 48 hours of your request)
• Restrict Processing: Request we limit how we use your data
• Data Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw marketing consent at any time (your image will still be delivered, but won't be used for marketing)

To exercise these rights, email simon@lightbeamevents.co.uk with your request and session details (if available).

Parental Consent Required: Children under 18 may use Light Beam Booth only with parental or guardian consent. By allowing a child to use the service, parents/guardians consent to the processing of the child's data as described in this policy.

We do not knowingly collect data from children without parental consent. If you believe we have collected data from a child without proper consent, please contact us immediately.

We implement appropriate technical and organizational security measures, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure cloud storage with access controls
• Regular security assessments
• Automatic data deletion after 7 days
• Limited employee access on a need-to-know basis

However, no internet transmission is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

If you consent to marketing use of your images, we may:

• Post your images on social media (Instagram, Facebook, etc.)
• Display images on our website and promotional materials
• Use images in advertising and marketing campaigns

Opt-Out: You can withdraw consent or request we stop using your image for marketing by emailing simon@lightbeamevents.co.uk. We will remove your images from future marketing materials, though images already published may remain in historical posts.

The Light Beam Booth kiosk interface does not use cookies or tracking technologies beyond what's necessary for the session to function (session authentication, image display). No analytics or advertising cookies are used.

We may update this Privacy Policy from time to time. Changes will be posted at the booth and on our website with a new "Last Updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.