This Privacy Notice explains how Alexandre Silva Alves, trading as Lumina Book ("we", "us", "our"), collects, uses and protects personal data when you use Luminabook (the "Service"). We are the data controller for the personal data we process about our account holders and their end-clients booking through Luminabook.
1. Personal data we collect
- Account data — name, email address, login credentials, profile photo (if uploaded), business name, logo, branding preferences and settings.
- Client data — name, email, phone and appointment history that you or your clients submit through your booking page.
- Usage & device data — pages visited, actions taken in the Service, IP address, browser type, device identifiers and diagnostic logs.
- Support communications — messages you send us and their metadata.
2. How we use personal data
- to create and operate your account and process bookings;
- to deliver confirmations, reminders and other transactional messages;
- to prevent fraud, abuse and to keep the Service secure;
- to improve the Service, fix bugs and understand feature usage;
- to provide customer support;
- to comply with legal obligations.
3. Legal basis
We process personal data on the basis of performing our contract with you, our legitimate interests in operating and improving the Service, your consent where required (e.g. certain analytics or marketing communications), and our legal obligations.
4. Who we share data with
- Service providers / subprocessors — hosting, database, email delivery and error monitoring vendors who process data on our behalf under contract.
- Payments (Merchant of Record) — Paddle.com Market Ltd is the Merchant of Record for our subscriptions. Paddle handles checkout, billing, tax calculation, invoicing and payment-related support. See Paddle's Privacy Notice.
- Professional advisers — accountants and lawyers where necessary.
- Authorities — where we are legally required to do so.
We do not sell personal data.
5. Retention
We keep personal data for as long as your account is active and for a reasonable period afterwards to satisfy legal, tax and accounting obligations. When data is no longer needed, we delete or anonymise it. You can request deletion of your account at any time.
6. Your rights
Subject to applicable law, you have the right to access, correct, delete, restrict or object to processing of your personal data, to portability, and to withdraw consent. To exercise these rights, contact us through your account. If you are in the EU/UK you may also lodge a complaint with your local data protection authority.
7. Security
We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and row-level authorisation on our database. No system is perfectly secure; report any suspected vulnerability through your account.
8. International transfers
Our infrastructure and subprocessors may store or process data outside your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
9. Cookies
We use strictly necessary cookies and local storage to keep you signed in and to remember preferences. We may also use privacy-respecting analytics. You can manage cookies from your browser settings.
10. Contact
For privacy questions or data requests, contact Alexandre Silva Alves (Lumina Book) through your account support channel.