Privacy Policy

1. Introduction

Lumin Hosting ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website and hosting services ("Services"). By using our Services, you consent to the practices described in this policy.

Our servers are located in Helsinki, Finland, and we process all data in compliance with the European Union's General Data Protection Regulation (GDPR) and applicable Finnish data protection laws.

2. Information We Collect

We collect the following types of information:

2.1 Information You Provide

• Account information: Name, email address, and password when you register for an account.
• Billing information: Payment card details are collected and processed securely by our payment processor, Stripe. We do not store your full card number on our servers.
• Contact information: Name, email, and message content when you use our contact form.
• Site content: Any content you upload to your WordPress site hosted on our platform.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, and actions taken within the dashboard.
• Log data: IP address, browser type, operating system, referring URLs, and timestamps when you access our website.
• Cookies: We use essential cookies to maintain your session and preferences. See Section 7 for details.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Services.
• To process payments and manage your subscription.
• To communicate with you about your account, including service announcements and support responses.
• To improve and develop the Services based on usage patterns.
• To detect, prevent, and address security issues, fraud, and technical problems.
• To comply with legal obligations.

4. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal grounds:

• Contract performance: Processing necessary to fulfil our contractual obligations to you (e.g., providing hosting services, processing payments).
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our Services and preventing fraud, provided these interests are not overridden by your rights.
• Legal obligation: Processing necessary to comply with applicable laws and regulations.
• Consent: Where required, we will obtain your explicit consent before processing your data for specific purposes.

5. Data Sharing and Third Parties

We do not sell your personal information. We may share your information with the following third parties only as necessary to provide the Services:

• Stripe: Our payment processor, which handles billing and payment card data. Stripe's privacy policy governs their use of your payment data.
• Hetzner Cloud: Our infrastructure provider, which hosts the servers where your sites and data are stored in Helsinki, Finland.
• Let's Encrypt: Certificate authority used to provision SSL certificates for your domains.

We may also disclose your information if required by law, legal process, or governmental request, or to protect the rights, property, or safety of Lumin Hosting, our users, or others.

6. Data Storage and Security

Your data is stored on servers located in Hetzner Cloud's data centre in Helsinki, Finland, within the European Union. We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit via TLS/SSL.
• Firewall protection and intrusion prevention systems.
• Per-site isolation to prevent cross-contamination.
• Regular security updates and patches.
• Automated daily backups with secure storage.

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Cookies

We use cookies to provide essential functionality:

• Session cookies: Required for authentication and maintaining your login session. These are temporary and are deleted when you close your browser.
• CSRF cookies: Used to protect against cross-site request forgery attacks.

We do not use third-party tracking cookies or advertising cookies. You can configure your browser to refuse cookies, but this may prevent you from using certain features of the Services.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. When you cancel your subscription, your site data may be retained for a limited period (up to 30 days) to allow for account recovery, after which it will be permanently deleted. We may retain certain information for longer periods as required by law or for legitimate business purposes such as resolving disputes.

9. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to erasure: You can request that we delete your personal data, subject to certain legal exceptions.
• Right to restrict processing: You can request that we limit how we use your personal data.
• Right to data portability: You can request your data in a structured, commonly used, machine-readable format.
• Right to object: You can object to our processing of your personal data based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at support@luminhosting.com. We will respond to your request within 30 days.

10. International Data Transfers

Your data is stored and processed within the European Union (Helsinki, Finland). We do not transfer your personal data outside of the EEA unless required to provide the Services (e.g., payment processing via Stripe). Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@luminhosting.com

Location: Helsinki, Finland

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data in accordance with applicable law.