1. Introduction
Welcome to LuminaNova. We are committed to protecting your privacy and ensuring transparency about how we handle your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.
This policy applies to all visitors of our website luminanova.ai and complies with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.
2. Data Controller
LuminaNova is the data controller responsible for your personal information. If you have any questions about this Privacy Policy or our data practices, you can contact us at:
3. Information We Collect
We collect minimal personal information necessary to provide our services. Specifically, we collect:
Contact Form Information
When you submit our contact form, we collect:
- Your name
- Your email address
- Your message content
Note: Our contact form uses a mailto: link, which opens your email client to send the message. This means your message is sent directly through your email provider, not stored on our servers.
Local Storage Data
We use your browser's local storage to save:
- Your language preference (English or Spanish)
This data is stored only in your browser and is not transmitted to our servers.
4. How We Use Your Information
We use your information for the following purposes:
- To respond to your inquiries submitted through the contact form
- To remember your preferred language for a better browsing experience
Legal Basis for Processing (GDPR)
Under the GDPR, we process your personal data based on:
- Consent: When you voluntarily submit information through our contact form, you consent to us processing that information to respond to your inquiry.
- Legitimate Interest: We have a legitimate interest in remembering your language preference to provide a better user experience.
6. Data Retention
We retain your personal information for the following periods:
- Contact Form Data: Since messages are sent directly to our email, we retain them as long as necessary to respond to your inquiry and for our legitimate business records, typically no longer than 2 years.
- Language Preference: Stored in your browser until you clear your browser data or change the setting.
8. International Data Transfers
Our website is hosted on GitHub Pages. If you are located outside the United States, please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.
For users in the European Economic Area (EEA), we ensure that any data transfers comply with GDPR requirements through appropriate safeguards.
9. Your Rights Under GDPR
If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccurate personal data.
- Right to Erasure: You can request that we delete your personal data ("right to be forgotten").
- Right to Restriction: You can request that we limit how we use your data.
- Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
- Right to Object: You can object to our processing of your personal data.
- Right to Withdraw Consent: You can withdraw your consent at any time where we rely on consent to process your data.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
You also have the right to lodge a complaint with your local data protection supervisory authority.
10. Your Rights Under US Privacy Laws
If you are a resident of California or other US states with privacy laws, you have the following rights:
- Right to Know: You can request information about what personal data we collect, use, and disclose.
- Right to Delete: You can request that we delete the personal data we have collected from you.
- Right to Opt-Out: We do not sell personal information, so this right does not apply.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise these rights, please contact us at [email protected].
11. Children's Privacy
Our website is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will take steps to delete such information.
12. Data Security
We take reasonable measures to protect your personal information from unauthorized access, use, or disclosure. Our website uses HTTPS encryption to protect data in transit. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the "Last Updated" date at the top of this policy. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: [email protected]
We will respond to your inquiry within 30 days.