1. Introduction
LuminNation ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our website or engage with our services.
LuminNation is a Charitable Incorporated Organisation (CIO) registered in England and Wales. We are the data controller for the personal data we process.
2. What Data We Collect
We may collect the following types of personal data:
- Contact information: name, email address, phone number, postal address
- Enquiry details: the content of messages you send via our contact form
- Support information: details you share when accessing our mental health support services
- Newsletter subscriptions: email addresses provided for communications
- Donation details: name, payment information (processed securely by third-party providers)
- Technical data: IP address, browser type, device information, pages visited
3. How We Use Your Data
We use your personal data for the following purposes:
- To provide and improve our charitable services
- To respond to your enquiries and support requests
- To process donations and issue receipts
- To send newsletters and updates (only with your consent)
- To comply with legal and regulatory obligations
- To monitor and improve our website
4. Legal Basis for Processing
We process your data under the following legal bases as defined by UK GDPR:
- Consent: for marketing communications and newsletter subscriptions
- Legitimate interest: for improving our services and responding to enquiries
- Legal obligation: for regulatory compliance and financial reporting
- Vital interest: in safeguarding situations involving risk to life
5. Cookies
Our website uses cookies to enhance your experience. Cookies are small text files stored on your device. We use:
- Essential cookies: necessary for the website to function properly
- Analytics cookies: to understand how visitors use our site (anonymised)
You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality.
6. Data Sharing
We do not sell your personal data. We may share data with:
- Trusted service providers who assist in delivering our services (under strict data processing agreements)
- Healthcare professionals where a referral is made with your consent
- Regulatory bodies where required by law
- Safeguarding authorities in cases of risk to life or serious harm
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Support-related records are retained in accordance with health and social care guidelines.
8. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal obligations)
- Withdraw consent for marketing communications at any time
- Object to processing based on legitimate interest
- Request data portability
- Lodge a complaint with the Information Commissioner's Office (ICO)
9. Data Security
We implement appropriate technical and organisational measures to protect your data, including encryption, access controls, and regular security reviews.
10. Contact Us
If you have questions about this policy or wish to exercise your rights, contact us at:
Email: hello@luminnation.org
Post: LuminNation, United Kingdom
