Privacy Policy of Lumina Sky Consulting

Last updated: September 13, 2025

1 Overview

This Privacy Policy explains how Lumina Sky Consulting (“Lumina Sky,” “we,” “us,” or “our”) collects, uses, shares, and safeguards information when you visit our website, submit forms, schedule meetings, or communicate with us.

2 What we collect

Information you provide directly
• Identity and contact details (name, email, phone, organization, role).
• Messages, meeting details, and any files you upload or send to us.
• Newsletter preferences and marketing opt‑ins (if offered).

Information collected automatically
• Device and usage data (IP address, browser type, pages viewed, timestamps, referring/exit pages).
• Cookies and similar technologies to operate the Site, remember preferences, and perform analytics.

Information from third parties
• Scheduling, forms, and website hosting providers (e.g., Wix tools).
• Analytics providers (e.g., Google Analytics).
• Publicly available sources (e.g., LinkedIn) to understand professional context.

We do not intentionally collect sensitive personal information through the Site (e.g., health, SSN, precise geolocation). Please do not submit sensitive information via public forms.

3 How we use information

We use information to:
• Provide, operate, secure, and improve the Site.
• Respond to inquiries and schedule consultations.
• Deliver marketing communications you opt into and measure their effectiveness.
• Analyze Site performance and audience engagement.
• Comply with legal obligations and enforce our Terms.

4 Cookies and analytics

We use cookies and similar technologies for core functionality and analytics. You can control cookies through your browser settings and, where offered, via our cookie banner/controls. Blocking some cookies may affect Site functionality.

5 Legal bases for processing (EEA/UK users)

Where the GDPR/UK GDPR applies, we process personal data under these legal bases:
• Consent (e.g., marketing emails, non‑essential cookies).
• Contract (to respond to your requests or provide services you ask for).
• Legitimate interests (to operate, secure, and improve the Site; prevent fraud; understand audience usage), balanced against your rights.
• Legal obligations (compliance and record‑keeping).

6 How we share information

We share information with:
• Service providers who assist with hosting, forms, scheduling, email, analytics, and security.
• Professional advisors (e.g., legal counsel) as needed.
• Authorities when required by law or to protect rights and safety.
• Successors/assignees in connection with a corporate transaction.

We do not sell personal information for money. We may “share” information for cross‑context behavioral advertising or analytics as defined by certain U.S. state laws; you can opt out via cookie settings (where available) or by contacting us.

7 Data transfers

We and our service providers may process information in the United States and other countries that may have different data‑protection laws than your country. We take steps designed to ensure appropriate safeguards for such transfers.

8 Retention

We keep personal information only as long as needed for the purposes described above, including to meet legal, accounting, or reporting requirements. Typical retention for routine inquiries and marketing leads is up to 3 years unless you request deletion sooner; contractual records may be kept longer to comply with legal obligations.

9 Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

10 Your choices

• Cookies: manage through your browser and (where offered) our cookie controls.
• Marketing emails: unsubscribe using the link in the message or contact us.
• Do‑Not‑Track: we currently do not respond to DNT signals.

11 Your rights

EEA/UK residents: subject to legal limits, you may have rights to access, correct, delete, restrict or object to processing, and data portability. You may withdraw consent at any time where processing is based on consent.

California residents (CPRA): you may have rights to know, delete, correct, opt out of “sale”/“sharing,” and to non‑discrimination for exercising your rights. We do not sell personal information for money; we may “share” for analytics/advertising as noted above. To exercise rights, contact us as described below.

We may need to verify your identity and request limited additional information to fulfill certain requests. Authorized agents may submit requests with appropriate proof of authorization.

12 Children’s privacy

The Site is not directed to children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child provided personal information, please contact us so we can delete it.

13 Third‑party links

This Policy does not apply to third‑party websites, services, or platforms that we link to. Review their privacy policies before providing information.

14 Changes to this Policy

We may update this Policy periodically. The “Last updated” date indicates the latest revision. Material changes will be highlighted on the Site.

15 Contact us

To ask questions, exercise privacy rights, or submit a complaint, use the Contact page on this Site. If you prefer email, use the address listed on that page. We will respond within a reasonable time and, where required by law, within the applicable statutory period.