Effective Date: August 28, 2026

Who We Are

We are Lumin8 Content Marketing, a sole proprietorship operating in Huntington Beach, Orange County, California, USA. Our website address is: https://www.lumin8content.com.

This Privacy Policy explains what personal data we collect, why we collect it, and how we use and protect it. By using our website or purchasing our services, you consent to the data practices described below.

What Personal Data We Collect and Why We Collect It

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help with spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available at https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact Forms

When you submit our contact form (https://www.lumin8content.com/contact/), we collect your name, email address, phone number (if provided), and the message content. We use this information to respond to your inquiry and, if applicable, schedule a discovery call. Contact form submissions are retained for 12 months after the last interaction unless you request deletion. We do not use contact form data for marketing purposes unless you explicitly opt in to our newsletter.

Client and Service Information

When you engage our marketing services, we collect the following information necessary to deliver our deliverables:

• Contact information: Name, email address, phone number, and business address
• Book and manuscript information: Titles, genres, manuscript files, blurbs, author bios, and cover art
• Account access: Login credentials for your website CMS, email platforms, analytics tools, and social media accounts. These are stored securely and accessed only for service delivery purposes.
• Payment information: Billing details processed through secure third-party payment processors (Stripe, PayPal). We do not store full credit card numbers on our servers.
• Communication records: Emails, call notes, and project correspondence
• Analytics and campaign data: Website traffic metrics, engagement data, and performance reports generated from your accounts

We collect this information to provide, operate, and improve our services, communicate with you about projects and deliverables, process payments, and comply with legal obligations.

Store and Checkout Information

When you purchase from our store, we collect and store the following:

• Products you’ve viewed (tracked via cookies to show recently viewed items)
• Location, IP address, and browser type (used to estimate taxes)
• Name, billing address, email address, phone number, and payment details (used to process your order, send account information, and prevent fraud)

If you create an account on our store, we will store your name, address, email, and phone number to populate the checkout for future orders. We generally store order information for 7 years for tax and accounting purposes.

We will also store comments or reviews if you choose to leave them.

Cookies

We use cookies to enhance your browsing experience, track site performance, and remember your preferences. For a complete list of the cookies we use, their purposes, and their durations, please see our Cookie Policy.

Analytics

We use Google Analytics 4 (GA4) to track and analyze website traffic. This helps us understand which pages visitors view, how long they stay, and what content drives engagement. Google Analytics uses cookies to recognize visitors across sessions.

• How to opt out: You can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on.
• Google’s privacy policy: https://policies.google.com/privacy

We do not use Google Analytics for retargeting advertising. Data collected is used solely for understanding website performance and improving content.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve our marketing services
• Communicate with you about projects, deliverables, and revisions
• Process payments and manage billing
• Send transactional emails (invoices, project updates, notifications)
• Send marketing emails only if you have explicitly opted in
• Analyze website performance and user behavior
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal information to third parties.

Third-Party Services

Our website and services use the following third-party tools that may collect data about you:

These third-party services have their own privacy policies. We encourage you to review them before providing data.

Embedded Content from Other Websites

Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who We Share Your Data With

We share personal information with the following parties only as necessary to deliver our services:

• Payment processors (Stripe, PayPal): Transaction details required to process and support payments, including the purchase total and billing information
• Email service providers: Subscriber data for sending transactional and (with your consent) marketing emails
• Cloud storage providers: Project files for secure collaboration
• Legal authorities: When required by law, court order, or government request
• Business transfers: In connection with a merger, sale, or transfer of assets (with notice to affected individuals where required)

We do not share your data for marketing purposes with unrelated third parties.

If you request a password reset, your IP address will be included in the reset email.

How Long We Retain Your Data

After the retention period expires, we securely delete or anonymize your data where legally permissible.

Where Your Data Is Sent

• Comment spam detection: Visitor comments may be checked through an automated spam detection service (Akismet). Data is transmitted to the Akismet servers for analysis.
• Cloud storage: Client files may be stored on encrypted cloud servers (Google Drive, Dropbox) located in the United States.
• Email systems: Communications are transmitted through standard email servers with TLS encryption.
• Payment processing: Payment data is transmitted directly to Stripe or PayPal servers over SSL-encrypted connections.

All data transfers occur within the United States. If we begin processing data of individuals in the European Union or European Economic Area, we will implement Standard Contractual Clauses or rely on an adequacy decision as required by GDPR.

What Rights You Have Over Your Data

General Rights

If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

California Consumer Privacy Act (CCPA) Rights

As a California business, we comply with the California Consumer Privacy Act. California residents have the following rights:

1. Right to Know: Request disclosure of what personal data we collect, use, share, or sell
2. Right to Delete: Request deletion of personal data we hold (with certain legal exceptions)
3. Right to Opt-Out: Opt out of the sale of personal information (we do not sell data)
4. Right to Non-Discrimination: Receive equal service and pricing regardless of whether you exercise your privacy rights

To exercise any of these rights, please contact us using the information in the Contact Us section below. We will respond within 45 days of verifying your identity.

User Account Rights

All users who have registered an account on our website can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Data Security and Breach Procedures

We employ industry-standard security measures to protect your information, including:

• SSL/TLS encryption for all website communications
• PCI-compliant payment processing through Stripe and PayPal
• Encrypted cloud storage for client files
• Two-factor authentication for administrative account access
• Regular security audits and software updates
• Staff training in data protection best practices

Data Breach Procedures

In the event of a data breach, we have the following procedures in place:

1. Detection and containment: Identify the scope of the breach and isolate affected systems
2. Assessment: Determine what data was compromised and who may be affected
3. Notification: Notify affected individuals and relevant regulatory authorities within the timeframes required by California law (Cal. Civ. Code § 1798.82)
4. Remediation: Implement corrective measures to prevent recurrence
5. Documentation: Maintain a record of the breach, its impact, and remedial actions taken

Automated Decision Making and Profiling

We do not use automated decision making or profiling to make decisions that produce legal or similarly significant effects for you. All marketing strategy recommendations, content revisions, and service adjustments are made by human professionals with editorial oversight.

What Third Parties We Receive Data From

We do not receive personal data about you from third-party advertisers or data brokers. The only third-party data we may receive is:

• Gravatar hash (for comment avatars)
• Payment confirmation data from Stripe/PayPal
• Referral source data from search engines (anonymous)

Children’s Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we discover we have received data from a child under 13, we will delete it immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top. You are advised to review this Privacy Policy periodically for any changes. Changes will become effective upon posting.

Contact Us

For questions about this Privacy Policy, data access or deletion requests, CCPA rights exercises, or privacy concerns, please contact us:

Website Contact: https://www.lumin8content.com/contact/
Business Address: Huntington Beach, Orange County, California, USA

We will respond to all data access, deletion, and privacy inquiries within 45 days of verification.