At Lumora Tech ("we", "us", or "our"), respecting your privacy and protecting your personal and business data is a core tenet of our agency values. This Privacy Policy explains transparently how we collect, use, disclose, and safeguard your information when you visit our website, submit a project inquiry, subscribe to our insights newsletter, or partner with us for digital services.
We adhere to applicable data protection regulations, including the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and global privacy best practices.
Our Absolute Commitment: Lumora Tech does not sell, rent, monetize, or trade your personal data, project details, or contact information to data brokers or third-party marketing companies under any circumstances.
We collect information in two primary ways: information you provide directly to us, and technical information collected automatically as you navigate our platform.
A. Information You Provide Directly:
- Contact & Consultation Forms: Your full name, email address, phone number, company name, website URL, project scope, requirements, and budget expectations when contacting us for proposals or consultations.
- Newsletter Subscription: Your business or personal email address submitted to receive digital design trends, tech articles, and agency news.
- Client Onboarding & Project Data: Billing information, company registered address, tax identification numbers, staging credentials, and creative assets provided to execute your project.
B. Technical Information Collected Automatically:
- Device & Log Data: Internet Protocol (IP) address, browser type and version, operating system, language preferences, referring/exit URLs, and date/time stamps.
- Usage Telemetry: Pages viewed, time spent per section, scroll depth, and interaction metrics used to evaluate and optimize the performance of our website.
We use the collected information for specific, legitimate business purposes related to our digital agency operations:
- To evaluate project scopes, prepare bespoke agency proposals, and execute contract milestones.
- To design, build, test, and deploy custom web, mobile, UI/UX, and marketing deliverables requested by you.
- To communicate project status updates, deliverables, invoices, and customer support responses.
- To distribute our newsletter and design insights to subscribed users (you can unsubscribe at any time via the one-click link).
- To monitor website traffic, diagnose server errors, mitigate cyber threats, and maintain secure infrastructure.
- To fulfill statutory tax, legal, and financial reporting obligations.
If you reside within the European Economic Area (EEA), the United Kingdom, or California, we process your personal data under the following legal bases:
- Performance of a Contract: When processing is necessary to prepare an agency proposal, enter into an SOW, or deliver commissioned design and software services.
- Legitimate Interests: When processing supports our business operations (such as website security, fraud prevention, and service quality improvements) without overriding your fundamental rights.
- Consent: When you provide explicit opt-in consent, such as joining our email newsletter or accepting non-essential analytics cookies.
- Legal Obligation: When required to comply with applicable laws, subpoenas, or accounting regulations.
Lumora Tech uses cookies and standard web beacons to ensure smooth site navigation and analyze traffic patterns. We categorize cookies into:
- Strictly Necessary Cookies: Essential for site functionality, CSRF security verification, and session state. These cannot be switched off in our systems.
- Performance & Analytics Cookies: Enable us to count visits, traffic sources, and page popularity (e.g. Google Analytics) to measure and improve our site's responsiveness.
- Functional Cookies: Enhance personalization by remembering your locale or display preferences.
You can configure your browser to block or alert you about these cookies. However, disabling certain cookies may impact the display or functionality of interactive site components.
We strictly limit access to your personal data. We only share information with trusted third-party service providers who assist us in operating our business under rigorous data processing agreements:
- Cloud Hosting & Infrastructure: Enterprise-grade hosting partners (such as AWS, Google Cloud, DigitalOcean) that maintain secure physical and cloud server facilities.
- Communication & Email Gateways: Transactional email delivery providers (e.g., Mailgun, SendGrid) used to send quote confirmations and project updates.
- Payment Processors: PCI-DSS compliant payment gateways (e.g., Stripe, bank wire networks) for invoicing and recurring retainer billing.
- Legal & Compliance Authorities: We may disclose information if required by subpoena, court order, or applicable law to protect our legal rights or prevent fraud.
As a technology agency specializing in cloud services and cybersecurity, we implement robust technical and organizational security controls:
- End-to-end Transport Layer Security (TLS 1.3 / HTTPS) encryption for all web communications and form submissions.
- Encrypted storage of sensitive client assets, API keys, and credentials with role-based access control (RBAC).
- Regular vulnerability scans, code reviews, and dependency patching.
- Strict internal non-disclosure policies governing all engineering and creative staff.
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy:
- Project Inquiries: Unconverted project inquiries and contact submissions are securely deleted or anonymized after twenty-four (24) months.
- Client Project Records: Source code, contracts, invoices, and communication histories are maintained for the duration of the engagement and up to seven (7) years post-completion for statutory tax and legal compliance.
- Newsletter Subscribers: Retained until you click "Unsubscribe" or request removal.
Depending on your geographic jurisdiction, you hold specific legal rights concerning your personal data:
- Right of Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate, incomplete, or outdated information.
- Right to Erasure ("Right to be Forgotten"): Request the permanent deletion of your personal data where retention is no longer legally mandated.
- Right to Data Portability: Request that we provide your data in a structured, machine-readable format.
- Right to Withdraw Consent: Withdraw consent for marketing emails at any time.
- Non-Discrimination: We will never deny services, charge different prices, or provide a lower quality of service if you exercise your privacy rights.
To exercise any of these rights, email us at info@lumoratech.ai. We will process and respond to your request within thirty (30) days without fee.
Our website and professional agency services are intended exclusively for commercial entities and individuals aged 18 and older. We do not knowingly solicit or collect personal information from children under the age of 16. If we discover that a minor has provided us with personal information, we will delete it promptly.
Our website, blog articles, and client portfolio items may link to external websites, client platforms, or social media networks (e.g. LinkedIn, Twitter, Facebook). We do not control and are not responsible for the privacy practices, content, or cookie policies of those external websites. We encourage you to review their respective privacy notices upon leaving our site.
We may update this Privacy Policy periodically to reflect changes in our operational practices, new technology implementations, or legal standards. Any revisions will be published on this page with an updated "Effective Date". Continued use of our site and services following posted updates signifies your acceptance of the revised terms.
