Privacy Policy

Lumi Gaia ("we", "our", "us") is operated by [Company name, legal entity, registered address — to be completed]. We are the data controller for personal data collected through the lumi-gaia.com website and any related services.

Contact: hello@lumi-gaia.com

We collect the following categories of personal data:

• Email address — provided voluntarily when you join our waiting list or subscribe to updates.
• Consent record — the date, time, and version of the consent text you agreed to, stored for legal compliance.
• Technical data — IP address (used for rate-limiting and security), browser type, pages visited. This data is processed in aggregate and is not linked to your identity where possible.
• Cookie data — see Section 7 (Cookies) below.

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR / EU 2016/679):

• Consent (Art. 6(1)(a) GDPR) — for sending you marketing communications about the Lumi Gaia platform, including launch announcements. You may withdraw your consent at any time by clicking the unsubscribe link in any email or by contacting us.
• Legitimate interests (Art. 6(1)(f) GDPR) — for fraud prevention, security, and basic analytics to operate our website.

We use your data to:

• Send you a welcome email confirming your subscription.
• Send you launch announcements and product updates that you have consented to.
• Protect our services against spam and abuse.
• Comply with applicable legal obligations.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

We retain your email address and consent record for as long as you are subscribed to our communications, plus a period of up to 3 years thereafter for legal compliance purposes.

If you unsubscribe, we will retain a suppression record (your email address and the date of unsubscription) to prevent you from accidentally being re-added to our lists.

We use the following trusted sub-processors to operate our services. Each processor is bound by data processing agreements and maintains appropriate safeguards:

• Supabase Inc. (PostgreSQL database hosting) — data stored within the EU where available.
• Resend Inc. (transactional email delivery) — processes email addresses to deliver welcome and notification emails.
• Vercel Inc. (website hosting) — processes technical data for request handling and edge delivery.
• Google LLC (Google Analytics 4, reCAPTCHA) — analytics data is anonymised before processing; reCAPTCHA processes technical signals to protect against automated abuse. Google Analytics is loaded only after cookie consent is granted.
• Cybot A/S (Cookiebot) — manages cookie consent records.

We use the following categories of cookies:

• Strictly necessary — required for the website to function (e.g. security cookies, session management). No consent is required.
• Analytics (optional) — Google Analytics 4, loaded only after you grant consent via our cookie banner.

You can manage or withdraw your cookie consent at any time using the cookie settings button in the footer.

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure— request deletion of your data ("right to be forgotten").
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — receive your data in a machine-readable format.
• Right to withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint — with the supervisory authority in your country of residence (in Poland: UODO — Urząd Ochrony Danych Osobowych).

To exercise any of these rights, contact us at hello@lumi-gaia.com. We will respond within 30 days.

Some of our processors are based outside the European Economic Area (EEA), including the United States. Where data is transferred internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised. We will notify registered users of material changes via email.

For any privacy-related enquiries, please contact: hello@lumi-gaia.com