Privacy Policy
Last updated: 14 August 2026
This policy explains what personal information henryluc.com ("we", "our", "the studio") collects, why it is collected, and the choices you have. It is written to meet the EU/UK GDPR, the California Consumer Privacy Act as amended by the CPRA, and Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP). Controller: Panoramic Media LLC, which owns and operates henryluc.com and trades as the Henry Luc studio. Contact: hello@henryluc.com.
Information we collect
Information you give us: name, email address, company or project name, project type, budget range and the message you send through the enquiry form or the AI concierge chat.
Information collected automatically: basic technical data such as IP address, browser type, device type, referring page and pages viewed. Analytics data is only collected where you have consented to analytics cookies.
We do not knowingly collect information from children under 16, and we do not collect special-category data.
Why we use it
To reply to your enquiry, prepare a proposal and deliver services you request; to operate, secure and improve the website; and to comply with legal obligations.
Legal bases under the GDPR: performance of a contract or steps taken at your request (enquiries), legitimate interests (site security, service improvement) and consent (analytics and marketing cookies, marketing email). You may withdraw consent at any time.
AI concierge
The chat assistant on this site is powered by a third-party large language model provider. Messages you send are transmitted to that provider to generate a reply and may be retained briefly for abuse prevention. Do not enter sensitive personal, financial or health information into the chat. Replies are generated by AI and may contain errors; nothing said by the assistant is a binding quote or professional advice.
Sharing and transfers
We share personal information only with service providers that help operate the site: hosting and database infrastructure, the AI model provider, and email delivery. They act on our instructions under contract.
We do not sell personal information and we do not share it for cross-context behavioural advertising.
Data may be processed in the United States, the European Union and Mexico. Where personal data leaves the EEA or UK, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
Retention
Enquiries are kept for up to 24 months after our last contact unless a project starts, in which case records are kept for the duration of the engagement plus the period required by tax and accounting law. Chat transcripts are kept no longer than needed to answer and improve the service.
Your rights
Depending on where you live, you may request access to your personal information, correction, deletion, restriction, portability, and objection to processing. EU/UK residents may complain to their supervisory authority.
California residents may request disclosure of the categories and specific pieces of personal information collected, request deletion or correction, and opt out of sale or sharing (we do neither). We will not discriminate against you for exercising these rights.
In Mexico you may exercise your ARCO rights (access, rectification, cancellation, opposition) and revoke consent by writing to the address below.
To exercise any right, email hello@henryluc.com. We respond within the period required by applicable law (30 days in most cases).
Cookies
Strictly necessary cookies keep the site working and are always on. Analytics and marketing cookies only run with your consent, requested through the cookie banner. You can change your choice at any time using the "Cookie settings" link in the footer, or by clearing your browser storage.
Security and changes
We use encryption in transit, access controls and reputable infrastructure providers. No system is perfectly secure, so we cannot guarantee absolute security.
If this policy changes we will update the date at the top of the page and, for material changes, request fresh consent where required.