Lume

Lume Privacy Policy

Short draft • Effective date: [insert date] • Controller: [insert legal entity name]

This Privacy Policy explains how Lume collects, uses, stores and shares personal information when you use the Lume mobile application. It is intended to support UK GDPR transparency requirements and should be completed with the final company and provider details before publication.

1. Information we collect

Account information, such as your name, email address and profile photo.

Onboarding and preference information, including your performer background, interests, location and discovery preferences.

Membership and subscription information, including plan status, renewal information and transaction references received from the relevant app store or payment provider.

Content you submit, including accommodation listings, photographs, ratings, reviews and support-form information.

Saved items and app preferences, including notification choices.

Technical and usage information collected through the app, analytics and crash-reporting tools.

2. How we use your information

Create and maintain your account and authenticate you.

Personalise professional discovery, accommodation ordering, craft guides and relevant notifications.

Provide and manage Premium access and subscription status.

Publish, moderate and manage accommodation listings, ratings and reviews.

Send account, payment, submission and important service notifications.

Respond to support requests and attach relevant account context where needed.

Maintain security, prevent misuse, diagnose technical issues and understand how Lume is used.

3. Legal bases

Depending on the activity, Lume may process personal information because it is necessary to provide the service you requested, because there is a legitimate interest in operating and securing the platform, because you have given consent, or because processing is required by law. The final published policy should map each processing activity to the appropriate lawful basis.

4. Who we share information with

Lume may use service providers for hosting/database services, payments or subscription management, analytics, push notifications, crash reporting and email delivery. These providers process information only as required to provide their services and under appropriate data-processing arrangements.

Information may also be shared where required by law, to protect legal rights or safety, or as part of a legitimate business transfer. Lume does not sell personal information.

5. Payments and external services

Subscription payments may be processed through Apple, Google, Stripe, RevenueCat or another configured provider. Lume may receive subscription status and transaction references, but payment-card details are generally handled by the payment or app-store provider. External websites opened from Network or Accommodation are governed by those third parties’ own privacy policies.

6. Notifications

Lume may send push notifications where you have granted permission. Important communications, such as account verification, payment problems or subscription confirmations, may also be sent by email. Notification preferences can be managed in Settings, subject to communications that are necessary to operate your account or service.

7. Retention and security

Personal information is kept only for as long as necessary for the purpose for which it was collected, to meet legal obligations, resolve disputes and maintain appropriate records. Lume uses reasonable technical and organisational safeguards, but no system can guarantee absolute security.

8. Your rights

Depending on applicable law, you may have rights to access, correct, delete or restrict your personal information, object to certain processing, request a portable copy of your information, and withdraw consent where processing is based on consent. Account deletion and data-export requests can be made through the available account or support routes.

9. International transfers

Some service providers may process information outside the UK. Where required, Lume will use recognised safeguards for international transfers, such as adequacy regulations or approved contractual protections.

10. Children

The final release should state the minimum permitted user age and any parental-consent rules that apply. This draft does not assume an age threshold because the product scope does not specify one.

11. Changes and contact

This Privacy Policy may be updated as Lume, its providers or legal obligations change. Material changes will be communicated where required. Questions or privacy-rights requests can be sent to [insert privacy/contact email] or [insert postal address if required]. You may also have the right to complain to the UK Information Commissioner’s Office or another relevant supervisory authority.

Data sources