Privacy Policy

Last updated: 13 August 2026

This policy explains what personal data Luma ("Luma", "we", "us") collects when you use lumaip.com, why, and your rights. We aim to collect as little as possible and never sell your data.

1. Data we collect

Data	Why
Email address	Create your account, send your activation code, receipts and support replies.
Payment details	Processed by our secure payment provider to take payment. We do not receive or store your full card number.
Subscription & activation data	Manage your plan, renewals and the activation code you use in the Strova player.
Technical data (IP, device, approximate country, timestamps)	Security, fraud prevention, and understanding where our customers are.
Usage & analytics	Improve the site (aggregated; see Cookies below).

2. How we use your data (legal bases)

• To provide the service — activation, billing, support (performance of our contract with you).
• Fraud prevention & security (our legitimate interests).
• Analytics & improvement (consent where required, otherwise legitimate interests).
• Legal compliance — e.g. tax and accounting records.

3. Who we share it with

We share data only with the service providers needed to run Luma, under appropriate data-processing agreements. These fall into a few categories:

• Payment processing — to take payment securely and prevent fraud.
• Secure hosting & authentication — to run your account and store your data safely.
• Transactional email — to send your activation code and receipts.
• Media player activation — to set up and maintain your access, we pass only the minimum activation details required.
• Analytics — aggregated, non-identifying usage statistics.

We do not sell your personal data or share it for third-party advertising.

4. Cookies & analytics

We use essential cookies to keep you signed in, and analytics to understand aggregate usage. You can control cookies in your browser settings.

5. Retention

We keep account and subscription data for as long as your account is active and as required for legal, tax and accounting purposes, then delete or anonymise it.

6. International transfers

Some providers may process data outside your country. Where they do, appropriate safeguards (such as EU Standard Contractual Clauses) apply.

7. Your rights

Depending on your location (including under the EU/EEA GDPR), you may have the right to access, correct, delete, restrict or port your data, and to object to certain processing. To exercise any right, email [email protected]. You may also complain to your local data protection authority.

8. Contact