Privacy Policy

Last Updated: January 2025

Lumora Agency ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website or submit an application. Please read it carefully.

1. Information We Collect

1.1 Information You Provide

When you submit an application, we collect:

  • Full name
  • Email address
  • Phone number
  • Company or brand name
  • Website URL (if provided)
  • Business information including revenue range, marketing budget, services of interest, and growth challenges
  • Any additional information you choose to provide

1.2 Information Collected Automatically

When you visit our website, we may automatically collect limited technical information including:

  • IP address (stored securely, used for rate limiting and security)
  • Browser type and version
  • Pages visited and time spent
  • Referring URL

We do not use third-party analytics, tracking pixels, advertising cookies, or social media trackers. We do not share browsing data with any third party.

2. How We Use Your Information

We use the information we collect to:

  • Review and evaluate your application for potential partnership
  • Contact you regarding your application and our services
  • Improve our website, services, and application process
  • Protect the security and integrity of our website and systems
  • Comply with legal obligations

We will never use your information for unsolicited marketing to third parties, sell your data, or share it for advertising purposes.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, our legal bases for processing your data are:

  • Consent: You explicitly consent to data processing when submitting the application form
  • Legitimate Interest: We have a legitimate interest in evaluating applications and improving our services
  • Legal Obligation: Where required to comply with applicable law

4. Data Retention

We retain your application data for as long as necessary to evaluate your application and maintain our business records:

  • Qualified applications: Retained for the duration of any business relationship and for up to 24 months afterward
  • Declined/unqualified applications: Deleted within 90 days unless you request earlier deletion
  • Technical logs: IP addresses and access logs are retained for up to 30 days for security purposes

You may request deletion of your data at any time by contacting us (see Section 8).

5. Data Sharing

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their own purposes. We may share data only in the following limited circumstances:

  • Service Providers: Trusted third parties who help us operate our website and business (e.g., hosting providers, email services), bound by confidentiality agreements
  • Legal Requirements: When required by law, court order, or governmental request
  • Safety: To protect the rights, property, or safety of Lumora Agency, our users, or the public

6. Cookies & Tracking

Our website uses only strictly necessary cookies required for authentication and session management. We do not use:

  • Third-party analytics cookies (no Google Analytics, etc.)
  • Advertising or retargeting cookies
  • Social media tracking pixels
  • Cross-site tracking of any kind

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encrypted data transmission (HTTPS/TLS)
  • Hashed passwords (bcrypt with salt)
  • Authenticated and access-controlled admin panel
  • Rate limiting to prevent abuse
  • Security headers (CSP, HSTS, X-Frame-Options, etc.)
  • Regular security reviews

While we take reasonable precautions, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your data ("right to be forgotten")
  • Portability: Request your data in a structured, machine-readable format
  • Objection: Object to processing of your data
  • Withdrawal: Withdraw consent at any time (without affecting prior processing)

California residents (CCPA): You have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at hello@lumora.agency. We will respond within 30 days.

9. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

10. International Data Transfers

Your data may be processed and stored in the United States. By submitting your information, you consent to this transfer. We ensure appropriate safeguards are in place for any international data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically. Material changes will be communicated prominently on our website.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

  • Email: hello@lumora.agency
  • Lumora Agency
  • Los Angeles, California, United States