Legal
Privacy Policy
Luminous Group, LLC ("Luminous Group," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect when you visit luminousgroup.io (the "Site"), how we use and share it, and the choices and rights you have. It also describes how we comply with U.S. state privacy laws — including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA") — and the EU and UK General Data Protection Regulation ("GDPR/UK GDPR") where applicable.
By using the Site, you acknowledge the practices described in this Privacy Policy. If you do not agree, please do not use the Site.
Table of Contents
- Summary
- Scope
- Information We Collect
- How We Use Information
- How We Share Information
- Cookies and Tracking Technologies
- Your Choices and Rights
- Sensitive Personal Information
- Automated Decision-Making
- Data Retention
- Security
- Children
- International Transfers
- Changes to This Policy
- How to Contact Us
1. Summary
Luminous Group operates a professional services consulting website. We collect limited information — primarily what you submit through our contact form and standard technical data automatically logged by our website infrastructure. We do not sell or share personal information for cross-context behavioral advertising, we do not use automated decision-making or profiling that produces legal or similarly significant effects, and we do not knowingly collect information from children under 18.
2. Scope
This Privacy Policy applies to luminousgroup.io and to information collected by Luminous Group in connection with that Site. It does not apply to third-party websites you may reach via links from our Site (for example, podcast platforms, publishers, or other sites referenced in our publications). When you leave our Site, you are subject to the privacy practices of those third parties.
3. Information We Collect
Information You Provide
When you submit our contact form, we collect the information you choose to provide, which may include:
- Name
- Email address
- Company name (optional)
- Phone number (optional)
- The content of your message
You may also contact us directly by email, phone, or postal mail using the information in Section 15. If you do, we will receive whatever information you include in that communication.
Information Collected Automatically
When you visit our Site, our hosting and content-delivery providers (currently Cloudflare and Cloudflare Pages) automatically log standard technical information for security, abuse prevention, and analytics purposes. This may include:
- IP address
- Approximate geographic location (typically at country or region level)
- Browser type and version, operating system, and device type
- Referring URL and pages viewed on our Site
- Date, time, and duration of your visit
This information may be considered "personal information" or "personal data" under certain U.S. state privacy laws and under the GDPR/UK GDPR.
Information from Third Parties
We do not purchase personal information from data brokers. We may receive limited information about you from professional contexts where you have voluntarily shared it (for example, a mutual contact, a public conference speaker bio, or a referral) — and we will use that information only for the purpose for which it was provided.
4. How We Use Information
We use the information described above to:
- Respond to your inquiries and provide the consulting, advisory, training, or other services you request;
- Send you information about Luminous Group, our publications, or events — only where you have requested it or where permitted by applicable law;
- Operate, secure, maintain, and improve the Site;
- Comply with our legal obligations, enforce our terms, and protect our rights, property, and the safety of our users and the public.
We will not use your personal information for any purpose materially different from the purposes described in this Privacy Policy without notifying you and, where required by law, obtaining your consent.
5. How We Share Information
We share personal information only in the following circumstances:
- Service providers. We rely on third-party service providers to operate our Site and business — for example, our form submission processor (Formspree), our hosting and DNS provider (Cloudflare), our email provider, and our domain registrar. These providers process information on our behalf under contractual obligations limiting their use of that information to the services they provide to us.
- Professional advisors. We may share information with our attorneys, accountants, auditors, insurers, and similar professional advisors where reasonably necessary.
- Legal requirements and protection of rights. We may disclose information where required by applicable law, subpoena, court order, or other legal process, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Luminous Group, our clients, our users, or the public.
- Business transfers. In the event of a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, personal information may be transferred as part of that transaction. We will notify you of any such transfer where required by applicable law.
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA and other U.S. state privacy laws.
6. Cookies and Tracking Technologies
Our Site uses a minimal set of cookies and similar technologies necessary for basic functionality and security. We do not currently use third-party advertising cookies or build cross-site advertising profiles.
Our hosting provider (Cloudflare) may set strictly necessary cookies for security, bot mitigation, and performance — for example, to detect and block malicious traffic.
You can control or disable cookies through your browser settings. Note that disabling cookies may affect Site functionality.
Global Privacy Control (GPC): If your browser sends a Global Privacy Control signal, we treat it as a valid request to opt out of the "sale" or "sharing" of personal information where applicable under state privacy laws. Because we do not sell or share personal information for cross-context behavioral advertising, this does not change our practices but is honored as an opt-out signal.
7. Your Choices and Rights
All Visitors
- Email communications: If you receive promotional communications from us, you may opt out at any time using the unsubscribe link in the email or by emailing info@luminousgroup.io.
- Browser controls: You may adjust your browser to refuse cookies or to alert you when cookies are being sent.
U.S. State Privacy Rights
Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia (and any other state with a comprehensive consumer privacy law in effect) have rights with respect to their personal information, which may include:
- Right to know / access: the right to confirm whether we process your personal information and to obtain a copy of the personal information we hold about you;
- Right to correct: the right to request correction of inaccurate personal information;
- Right to delete: the right to request that we delete personal information we have collected from you, subject to certain exceptions;
- Right to data portability: the right to receive a copy of your personal information in a portable, readily usable format;
- Right to opt out: the right to opt out of the sale or sharing of personal information and out of targeted advertising and certain profiling. (As noted above, we do not engage in these activities.)
- Right to non-discrimination: the right not to receive discriminatory treatment for exercising any of these rights.
To exercise any of these rights, email us at info@luminousgroup.io with the subject line "Privacy Rights Request." We may ask for information to verify your identity before fulfilling the request. You may also designate an authorized agent to submit a request on your behalf, subject to verification as permitted by applicable law.
If we deny your request, you may appeal that decision by replying to our response or emailing us with the subject line "Privacy Rights Appeal."
Nevada Residents
Nevada residents have a right under Nevada Senate Bill 220 to opt out of the sale of certain personal information. We do not sell personal information as defined under Nevada law, but you may submit any related request to info@luminousgroup.io.
EU and UK Residents
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the GDPR/UK GDPR, which include the rights of access, rectification, erasure, restriction of processing, objection to processing, and data portability, and the right to withdraw consent where processing is based on consent. Our legal bases for processing your personal information typically include your consent, our legitimate interests (including operating and improving the Site and responding to inquiries), the necessity of processing for a contract you have with us, and compliance with our legal obligations.
You also have the right to lodge a complaint with your local data protection supervisory authority.
8. Sensitive Personal Information
We do not request or intentionally collect sensitive personal information (as defined under the CCPA/CPRA or comparable U.S. state laws) — such as Social Security number, driver's license number, financial account information, precise geolocation, racial or ethnic origin, religious beliefs, biometric information, or health information — through the Site. Please do not include such information in any communication with us through the contact form.
9. Automated Decision-Making
We do not engage in automated decision-making, including profiling, that produces legal or similarly significant effects concerning you.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy:
- Contact form submissions and direct communications: retained for the duration of any resulting engagement, plus a reasonable period thereafter for legal, accounting, and business records purposes (typically not more than seven years).
- Server and security logs: retained on a rolling basis (typically 30 to 90 days) for security and operational purposes, except where longer retention is necessary to investigate an incident.
We may retain personal information for longer where required by law or where reasonably necessary to enforce our rights, defend against legal claims, or comply with regulatory obligations.
11. Security
We use commercially reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, use, alteration, and disclosure. Our Site is served over HTTPS, and form submissions are encrypted in transit. No method of transmission over the Internet or method of electronic storage is, however, completely secure, and we cannot guarantee absolute security.
If you believe your information may have been compromised in connection with our Site, please contact us at info@luminousgroup.io.
12. Children
Our Site is directed to professionals and other adults. We do not knowingly collect personal information from children under the age of 18. If you believe a child under 18 has provided us with personal information, please contact us and we will take steps to delete it.
13. International Transfers
Luminous Group is based in the United States, and personal information we collect is processed and stored in the United States. If you access the Site from outside the United States, your information will be transferred to, processed in, and stored in the United States. U.S. data protection laws may differ from those of the country in which you reside. Where required by applicable law (including the GDPR/UK GDPR), we use appropriate safeguards — such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum — to protect your information when it is transferred internationally.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The "Effective" and "Last reviewed" dates at the top of this Policy indicate when it was most recently updated. If we make material changes, we will provide a more prominent notice (which may include, where required by law, email notification to individuals affected). We encourage you to review this page periodically.
15. How to Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or wish to submit a complaint:
- Email: info@luminousgroup.io
- Phone: (866) 868-8627
- Postal mail: Luminous Group, LLC · 1350 Beverly Road #115 #151 · McLean, VA 22101
If you are a California resident who has a disability and requires assistance to access this Privacy Policy in an alternative format, please contact us by any of the methods above. You may also print this page for your records.