Last updated: September 2026
This policy explains what data Lumendal collects, why, and what rights you have. We have tried to write it in plain English.
Note for the site owner: this is a solid starting point, not legal advice. Have it reviewed against your actual analytics, email and payment stack, and against the law where your visitors live, before launch.
Who we are
Lumendal (“we”, “us”) operates https://www.lumendal.com/. The data controller is [Registered business name], [address]. Contact: hello@lumendal.com.
What we collect
Collected automatically
- Standard server log data: IP address, browser and device type, referring page, pages visited, timestamps.
- Analytics data about how pages are used, in aggregate.
Provided by you
- Your email address and message, if you contact us.
- Your email address, if you subscribe to updates.
- Order information, if you buy a product. Payments are processed by a third-party payment provider. We never see or store your card details.
What we never collect
We do not ask for, collect or store health information about you. We have no accounts, no symptom trackers and no questionnaires. What you read on this site is not associated with your identity by us.
Why we process it
- To operate and secure the site — legitimate interest.
- To understand which content is useful — consent, where required.
- To reply to you — legitimate interest, or to take steps at your request.
- To send updates — consent, withdrawable at any time.
- To fulfil orders and meet tax obligations — contract and legal obligation.
Cookies
We use essential cookies required for the site to function, and — where you consent — analytics cookies. Affiliate partners may set cookies when you click an affiliate link, which is how they attribute a referral.
You can refuse or delete cookies through your browser settings. Refusing non-essential cookies does not affect your access to any content.
Who we share data with
We do not sell your personal data. We share it only with service providers acting on our behalf — hosting, analytics, email delivery and payment processing — and only as needed to provide the service, or where required by law.
How long we keep it
- Server logs: typically up to 12 months.
- Analytics: in line with the retention setting of our analytics provider.
- Email correspondence: up to 24 months after the last message.
- Newsletter data: until you unsubscribe.
- Order records: as long as tax law requires.
Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, port it, and withdraw consent at any time. Under the GDPR you may also complain to your national supervisory authority; in the UK that is the Information Commissioner’s Office.
If you are a California resident, you have rights under the CCPA/CPRA, including to know what is collected and to request deletion. We do not sell personal information.
To exercise any right, email hello@lumendal.com. We respond within one month.
International transfers
Our service providers may process data outside your country, including in the United States. Where required, transfers are covered by appropriate safeguards such as Standard Contractual Clauses.
Children
This site is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes
We will update this page when our practices change and revise the date above. Material changes will be noted prominently.