Privacy Policy

At Lumorao ("we", "us", or "our"), we are committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you visit our website lumorao.com or engage with our services.

By using our website or services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide Directly

When you fill out our contact form, request a proposal, or communicate with us, we may collect:

• Full name and email address
• Company name and website URL
• Phone number (if provided)
• Your message content and service interests
• Billing and payment information (processed securely via third-party payment processors)

1.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent, and navigation patterns
• Referring URLs and search terms
• Device type (desktop, mobile, tablet)

1.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to improve your experience on our site. Please refer to our Cookie Policy for detailed information.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide the services you request
• To send you proposals, quotes, and marketing communications (with your consent)
• To manage and improve our website performance and user experience
• To analyze traffic and usage patterns through analytics tools (e.g., Google Analytics)
• To comply with our legal obligations and enforce our terms
• To prevent fraud and maintain the security of our systems

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Consent — for marketing emails and non-essential cookies
• Contract — to fulfill services you have purchased or requested
• Legitimate Interests — for analytics, fraud prevention, and service improvement
• Legal Obligation — where required by applicable law

4. Sharing Your Information

We do not sell, rent, or trade your personal data. We may share your information with trusted third parties only in the following circumstances:

• Service Providers: Tools we use to operate our business (e.g., Google Analytics, email platforms, CRM tools) — bound by data processing agreements
• Payment Processors: Secure third-party processors for billing purposes — we do not store card data
• Legal Compliance: When required by law, court order, or governmental authority
• Business Transfer: In the event of a merger, acquisition, or sale of assets

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Client data related to active engagements is retained for the duration of the contract plus 3 years. Contact form submissions are retained for up to 2 years. You may request deletion at any time (see Section 7).

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the data we hold about you
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Restriction — Request that we limit how we process your data
• Portability — Receive your data in a structured, machine-readable format
• Objection — Object to processing based on legitimate interests or for direct marketing
• Withdraw Consent — Withdraw consent at any time where processing is consent-based

To exercise any of these rights, contact us at contact@lumorao.com. We will respond within 30 days.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including countries that may not have the same data protection laws. When we transfer data internationally, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.