Privacy Policy

Last updated: May 2026

1. Who We Are

LumoraMedia ("we", "us", "our") is a digital marketing agency incorporated and operating under the laws of the State of Delaware, USA. Our contact email is Lumoramedia@gmail.com. For the purposes of applicable data protection law, LumoraMedia is the data controller of personal information collected through this website.

2. Information We Collect

We collect information you provide directly to us, including:

• Name and email address when you submit our contact form
• Business name, website URL, and budget information submitted via our enquiry form
• Communications you send us by email or other means
• Messages and conversational data you submit through our on-site AI assistant, Luna

We also collect limited usage data automatically, including IP address, browser type, pages visited, and time spent on our site via standard web server logs.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we rely on the following lawful bases to process your personal data:

• Contract: Processing is necessary to respond to your enquiry and provide the services you have requested.
• Legitimate interests: We may process data to improve our website, understand how visitors interact with our content, and develop our services, provided those interests are not overridden by your rights.
• Consent: Where we ask for your explicit consent (e.g. marketing communications), we will only process your data on that basis and you may withdraw consent at any time.
• Legal obligation: Where we are required to retain or disclose data to comply with applicable law.

4. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and provide requested services
• Send you a tailored proposal following a strategy call
• Improve our website and services
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties.

5. AI-Powered Features (Luna)

Our website includes an AI-powered chat assistant called Luna. Luna is designed to answer questions about our services and help qualify your enquiry before routing you to our contact form.

• Luna may be powered by a large language model provided by Anthropic, Inc. ("Claude AI") when that integration is active.
• Messages you send to Luna may be transmitted to Anthropic's servers to generate a response. Please do not share sensitive personal information (such as financial details, passwords, or health information) via Luna.
• Conversation history is stored temporarily in your browser session only and is not retained on our servers beyond the duration of your visit.
• Luna is an automated system. Its responses are generated by AI and do not constitute professional advice.

Where Anthropic processes data on our behalf, it acts as a data processor under our instructions. For more details, see Anthropic's Privacy Policy.

6. Third-Party Services

Our website uses the following third-party services which may process your data:

• ClickUp — our contact form is embedded via ClickUp. Submissions are processed by ClickUp in accordance with their Privacy Policy.
• Google Fonts — we load fonts from Google's servers. Google may log your IP address. See Google's Privacy Policy.
• Anthropic (Claude AI) — when the Luna AI assistant is active, messages may be processed by Anthropic in accordance with their Privacy Policy.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Enquiry data is retained for up to 2 years. Luna conversation data is session-only and is not stored after your browser session ends.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict our processing of your data
• Withdraw consent at any time (without affecting the lawfulness of prior processing)
• Receive your personal data in a portable, machine-readable format (data portability — EEA/UK)
• Not be subject to solely automated decision-making that produces significant legal effects

To exercise any of these rights, contact us at Lumoramedia@gmail.com. We will respond within 30 days.

9. Automated Decision-Making

Our Luna AI assistant uses automated logic to suggest services based on your goals and budget. This is a recommendation tool only — no automated decision produces any legal or similarly significant effect on you. All final service decisions are made by our human team.

10. Cookies

Our website does not use tracking cookies. Third-party embeds (ClickUp, Google Fonts) may set functional cookies governed by their own policies. See our Cookie Policy for full details.

11. Security

We take reasonable technical and organisational measures to protect your information. However, no method of transmission over the internet is 100% secure.

12. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where required by law. If the breach is likely to result in a high risk to you personally, we will also notify you directly without undue delay.

13. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know: You may request details about the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to correct: You may request that we correct inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing: We do not sell or share your personal information with third parties for cross-context behavioural advertising.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your California rights, contact us at Lumoramedia@gmail.com. We do not currently respond to browser "Do Not Track" signals.

14. Delaware Residents — Delaware Personal Data Privacy Act (DPDPA)

If you are a resident of the State of Delaware, you have the following rights under the Delaware Personal Data Privacy Act (effective January 1, 2025):

• Right to confirm and access: You may confirm whether we are processing your personal data and request access to it.
• Right to correct: You may request correction of inaccurate personal data we hold about you.
• Right to delete: You may request deletion of personal data you have provided to us or that we have collected about you.
• Right to data portability: Where processing is carried out by automated means, you may request a copy of your personal data in a portable, machine-readable format.
• Right to opt out: You may opt out of the processing of your personal data for purposes of targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell personal data or use it for targeted advertising.
• Right to appeal: If we refuse to act on a rights request, you may appeal that decision by contacting us at Lumoramedia@gmail.com. We will respond to an appeal within 60 days. If your appeal is denied, you may submit a complaint to the Delaware Department of Justice.

To exercise your Delaware privacy rights, contact us at Lumoramedia@gmail.com. We will respond within 45 days, with an optional 45-day extension where reasonably necessary.

15. International Transfers

LumoraMedia is based in the United States (Delaware). If you are located in the European Economic Area, United Kingdom, or another jurisdiction with data transfer restrictions, your personal data will be transferred to and processed in the United States. We rely on appropriate transfer mechanisms — including Standard Contractual Clauses approved by the European Commission — to ensure adequate protection of your personal data when transferred outside the EEA or UK.

16. Changes to This Policy

We may update this policy from time to time. We will update the "Last updated" date at the top of this page when we do. Continued use of our website constitutes acceptance of the updated policy.

17. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at Lumoramedia@gmail.com.