Who is responsible

LŪDUM, located at Presidente Plaza, 3rd floor, Av. de la Revolución, San Salvador, El Salvador. Data protection officer: Iván López Márquez. For any data matter, write to hola@ludumsv.com or on WhatsApp at +503 7642 2690.

What data we collect

RED LŪDUM account: name, email address, phone (WhatsApp, optional), your Instagram username (optional) and your consents. Purchases: what you buy, how much you pay, the order number, whether you pick it up or we deliver it and, if you arrived through one of our links (from Instagram, for example), which post you came from and, if we sent you that link by direct message, the number of that conversation; payment is processed by n1co and we never store card details. Deliveries: if you ask for home delivery, the full name of the recipient, a contact number, the exact address and a landmark; if you tick «Save these details to my account», they are kept for your next purchase. Lab and LŪDUM Cloud: your rolls (film, format, date) and their scans, which we keep so you can view and download them from your account; if you share a roll with a link, whoever has it can see those photos. Reviews: if you review a product, we keep your stars, the title, the text, the photos you upload (your browser shrinks them before sending them and removes the camera and location data), the language you wrote it in and whether you bought it on the website («Verified purchase»). Reviews are public: anyone visiting the shop sees your first name with the initial of your last name, the stars, the text and the photos. Newsletter: your email, only if you ticked that you want to receive it. Photos: images from your rolls are only published if you ticked the box and then approve each photo (see «Your photos on the website»). Technical: the server logs the IP address of each visit for security for a short time. We don’t collect or ask for sensitive data. LŪDUM Members: if you become a member, your tier, how long the membership is paid for, your founder number if you have one and the activity on your credit (each load, each redemption with what you took and what expired, with its date); redemptions are recorded by the team when you show your card.

On what basis we do it

With your consent, which you give when you create your account (on the website or at the LŪDUM counter), tick the newsletter, tick the photos box or publish a review, and which you can withdraw whenever you like. And to do what you asked us to: deliver a purchase, develop your rolls or handle a repair. What the law of El Salvador requires (invoices, for example) we keep because the law says so.

What we use it for

To deliver what you bought, develop and return your rolls and scans, apply your 10% or your membership and let you know the status of your orders. With the origin of a purchase we know which posts work and, if we sent you the link by direct message, we can follow up with you in that same conversation. With your consent, also: to tell you about drops, the magazine and the archive (newsletter), to show your photos on the website (photos) and to publish your reviews in the shop so other people know what a product is like. We don’t sell or rent your data, or build advertising profiles.

Your photos on the website

If you ticked «I’d like my photos developed by LŪDUM to appear on the new website», that only means you’re interested: before publishing any photo of yours we show it to you and you tell us yes or no, photo by photo. We credit you however you like (name or Instagram) and you can ask us to remove it whenever you want. Your photos remain yours: we don’t sell them, we don’t give them to third parties and we don’t use them in paid advertising without asking you separately.

Who we share it with

Only with the services that make LŪDUM work, each with what it needs for its part: n1co (payments; with the order it also receives the delivery method and, for deliveries, the delivery details), Vercel (the website), Supabase (the accounts database), Resend (emails), Cloudflare (stores LŪDUM Cloud scans and review photos), Pixieset (scan delivery) and WhatsApp (notifications). Some store data on servers outside El Salvador, mainly in the United States; we do so under contracts that require them to take the same care we do, and with your consent, which you give when creating your account. If you ask for delivery, whoever carries the package (our team or a courier) receives your name, number, address and landmark, only for that delivery. We never share your data with anyone else, unless an authority requires it by law.

How long we keep it

Your account, while it’s active or until you delete it. Your scans, 90 days online from when they’re ready and a copy for 12 more months; we email you before each step and, once that period is over, we delete it. With LŪDUM Cloud (or Members Plus and Studio), they stay online while the plan is active. Purchases and invoices, with their delivery details, for as long as the law requires. Delivery details saved to your account, until you forget them from your account or delete it. Your reviews, until you delete them from the product page or delete your account; we may hide or delete a review that isn’t about the product or doesn’t respect other people. The newsletter, until you unsubscribe (there’s a link in every email). Sign-in links last 30 minutes and sessions, 30 days. Your membership and the activity on your credit, for as long as you have the account; since they are payments, we keep them for as long as the law requires.

Your rights

You can ask to see, correct, delete or restrict the use of your data, object to a use, take a copy and withdraw a consent, whenever you like and at no cost. Write to hola@ludumsv.com or delete your account from the website. We reply within 20 business days at most; we apply the withdrawal of a consent within 5 business days. If you delete your account, we also close your orders, your links and your published photos, and we delete your reviews (with their photos) and your Cloud scans. If we don’t handle your request properly, you can turn to the Agencia de Ciberseguridad del Estado (El Salvador’s state cybersecurity agency).

Cookies and storage

We use a single cookie, ludum_s, to keep you signed in to your account. The cart, your code, your early access and, if you arrived through one of our links, where you came from are stored in your browser’s local storage, not on our servers; the delivery details you type in the cart, only while the tab is open. Where you came from is kept for 30 days (or until your payment is confirmed) and only reaches us if you buy, with your order. We don’t use tracking or advertising cookies. The n1co payment page uses its own cookies, with its own notice.

Minors

The RED LŪDUM is for people over 18. If you’re a minor, ask your mother, father or guardian to create the account and write to us.

Security

Data travels encrypted, service keys live outside the page, sign-in links are stored encrypted and only the team handling your order sees what it needs. If a security incident affecting your data ever happened, we would notify you within 72 hours at most, as we would the authorities.

Changes

If we change this notice, we publish it here with the date and, if the change affects you, we let you know by email. Version 6 · October 16, 2026.