Corporate Website Privacy Policy

Effective Date: January 1, 2026

Introduction

The purpose of this Privacy Notice is to describe how Lumin Digital, Inc. (“we,” “us,” or “our”) collects, uses, shares, retains, and protects your Personal Information when you use our website (lumindigital.com) and any websites located at a subdomain of that address (collectively, the “Website”). This notice also describes your choices and rights with respect to your Personal Information and how to exercise those rights. “Personal Information” is any information relating to an identified or identifiable individual.

This Privacy Notice applies to visitors to our Website. It does not apply to any other websites operated by us at other domains. Additionally, our Website may contain links to other websites, and we are not responsible for the content, security, or privacy policies of external websites.

We may amend this notice from time to time. We encourage you to review this notice periodically, as changes will be posted on this page. If we make any material changes to this notice, we will provide a prominent notice. If you do not agree with this notice, you should not use our Website.

This Privacy Notice covers:

What Personal Information We Collect

Personal Information you provide to us

If you fill out a form on our Website (such as a “Request a Demo” or other contact form), we will collect and process that information to respond to inquiries/communications and to market our relevant products and services to you. Types of Personal Information collected may include your name, email address, company name, job title, your physical address, and payment and billing information.

Personal Information collected when you visit our Website

When you use our Website, we may automatically collect Personal Information, such as IP address, user-agent information (which is automatically sent by your web browser and may include device type), the specific resources you request or interact with, and information collected by cookies and other similar technologies.

Our Cookie Notice can be found here.

We do not collect sensitive Personal Information, such as social security numbers, racial or ethnic data, or biometric information.

Unless otherwise noted in this notice, we act as the “controller” of personal data that we collect and process.

How We Use Your Personal Information

We process your Personal Information for the following purposes:

  • To provide services requested by you (e.g., “Request a Demo”)
  • To respond to your requests for information
  • To contact you with updates about our company and/or discuss your interest in us
  • To market and advertise our products and services, including sending marketing communications
  • To analyze and improve our Website, products, and services

Please note that if you provide your Personal Information through our Website, we may use that information to contact you even if your browser sends a “Do Not Track” advisement header.

We use the following legal bases for collecting and processing Personal Information:

Consent. We may collect or process information with your consent, such as when you submit a contact form, request a demo, or sign up for communications from us.

Contractual Necessity. We may collect or process information we need to provide our services or fulfill a contractual obligation.

Legal Obligation. We may collect or process information to fulfill a legal obligation, such as responding to a valid subpoena or court order.

Legitimate Interest. We may collect or process information when we have a legitimate interest to do so, such as to understand how visitors use our Website, to improve our products and services, or to market our services to prospective clients, provided our legitimate interests are not outweighed by your rights.

Vital Interests. We may collect or process information if necessary to protect the vital interests of the user or another individual.

How We Share Information

We share Personal Information with our affiliates and partners as needed to provide our services. We share Personal Information with service providers such as web analytics platforms and other vendors we use to operate our Website and provide our products and services.

Our vendors and service providers are not permitted to use your Personal Information for any purpose other than to provide contracted services. Vendors are not permitted to use your Personal Information for their own marketing and are not allowed to share your information for marketing purposes.

We reserve the right to share threat intelligence with law enforcement officials, the Financial Services Information Sharing and Analysis Center (FS-ISAC), and other legitimate threat intelligence forums. The type of information shared in this instance is limited to anonymous details from entities that are suspected or known to be malicious in nature and that threaten the security of the digital banking system or user logins. Such information may include IP addresses, device characteristics, and other network signatures that allow for the detection and prevention of malicious communications.

We may share Personal Information in response to a valid legal summons, subpoena, or court order, or if required by law enforcement agencies. Where legally permitted to do so, we will provide notice of such disclosures in a timely manner.

We do not sell, rent, or otherwise share Personal Information with external third parties for their own marketing purposes.

How Long We Retain Your Information

How long we keep Personal Information depends on the type of information and the purpose for which it was collected. After a reasonable period of time, or upon completion of the purpose for which it was collected, we will either delete or anonymize Personal Information.

We retain Personal Information where we have an ongoing legitimate business purpose to do so, for example, to resolve disputes or to comply with applicable legal obligations.

We retain your Personal Information for as long as it is needed to provide our services to you and to fulfill our legal obligations, and for a reasonable period of time after such services are completed.

Cookies and Other Tracking Technologies

Cookies are small files stored on your web browser when you visit our Website. Some cookies last only as long as you remain on the website (“session cookies”); others, called “persistent cookies,” may be stored for longer periods of time. We use the following types of cookies on our Website:

  • Essential Cookies. Required for basic site functionality; our Website cannot function properly without these cookies.
  • Analytical Cookies. Help us understand how you interact with our Website, which parts you use most, and how you engage with us. This information helps us improve site functionality and user experience.
  • Marketing Cookies. Used to track visits to our Website and other websites in order to partner with companies to serve advertisements relevant to your interests.

If you would like to opt out of cookies, you may change the settings on your web browser to reject or delete cookies, or manage your consent preferences by clicking the Cookies widget at the bottom right of our Website.

More information about how we use cookies may be found in our Cookie Notice.

Your Rights Regarding Access To and Control Over Personal Information

You have the following rights regarding Personal Information we hold about you:

  • Right to Access. You may request information about the Personal Information we have collected about you.
  • Right to Correct. You may request that we correct or update inaccurate Personal Information we hold about you.
  • Right to Opt Out of Marketing. You may request at any time that we mark your record with a “Do Not Contact” flag to opt out of future marketing communications from us.
  • Right to Express Concerns. You may contact us at any time to express concerns about how Lumin Digital uses your Personal Information.

To exercise any of the rights described above, please contact us using the information provided in the “Contact Us” section below. We may ask you to verify your identity before processing your request. Additional rights may apply to residents of California, as described in the following section.

Information for California Residents

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), applies to information collected from California residents. Residents of California have the following rights with regard to their Personal Information:

The Right to Know

The categories of Personal Information we collect are described above in the section entitled “What Personal Information We Collect.” California residents may submit a verifiable request regarding the information collected, the types of sources from which Personal Information is collected, the purposes for which information is collected, and the specific Personal Information collected about them.

The Right to Delete

California residents may request that we delete Personal Information we have collected about them, subject to certain exceptions permitted by law.

The Right to Portability

California residents may request a copy of their Personal Information in a format that can be transferred to another person or entity.

The Right to Non-discrimination

We will not discriminate against you for exercising your privacy rights under California law.

The Right to Correct

California residents may request that we correct inaccurate Personal Information we maintain about them.

To exercise these rights, you may contact us by email at [email protected]. You may be asked to provide additional information in order for us to verify your identity when you make a request.

We do not sell Personal Information to third parties, nor do we share Personal Information for cross-context behavioral advertising purposes.

The section above, “What Personal Information we collect,” lists the categories of Personal Information we have collected in the preceding 12 months.

Security

We take all reasonable steps to protect the information we receive from you from accidental or unlawful destruction, loss, alteration, and unauthorized disclosure or access. We have implemented appropriate physical, technical, and administrative measures to safeguard and secure your information. These measures include:

  • Personal data is encrypted during transmission (look for the lock icon and “https” in your browser’s address bar).
  • Personal Information is stored on computers and servers maintained in a secure environment.
  • Employees are granted access to Personal Information only on a need-to-know basis (e.g., for customer service purposes).
  • Before sharing Personal Information with our vendors, we confirm that they have implemented appropriate security procedures to protect your data.

No security measures are perfect, however, and the risk of a data breach cannot be entirely eliminated. If you have concerns about the security of your information, please contact us using the information in the “Contact Us” section below.

Children’s Privacy

We do not knowingly collect or solicit Personal Information from children under the age of 13 without parental consent, unless permitted by law. If we become aware that we have collected Personal Information from a child under the age of 13 without parental consent (or as otherwise permitted by law), we will promptly delete it. If you believe that a child may have provided us with Personal Information without parental consent, please contact us immediately.

Sensitive Information

Unless specifically requested by us, we ask that you not send us, and that you not disclose on or through our Website or otherwise to us, any sensitive Personal Information (such as social security numbers, driver’s license numbers, financial account information, racial or ethnic origin, religious beliefs, health information, or biometric data).

Contact Us

If you have any questions about this Privacy Notice, or if you want to exercise your privacy rights as outlined above, please contact us at [email protected].