Privacy Policy
How we handle and protect your information
Last Updated: 15 January 2025
Effective Date: 15 January 2025
Introduction
Lumox ("we", "us", or "our") operates lumox.pro and respects your privacy. This policy explains what information we collect, why we collect it, and how you can manage your data. We're based in Australia and comply with the Privacy Act 1988, including the Australian Privacy Principles.
When you use our investing education services, you share personal details with us. We think you should know exactly what happens with that information. So here it is, in plain language.
Information We Collect
Information You Give Us Directly
When you sign up, contact us, or use our services, you might provide:
- Name and contact details (email address, phone number)
- Mailing address when you register for physical materials
- Payment information when enrolling in courses
- Questions or messages you send through our contact form
- Details about your investing experience and education goals
Information Collected Automatically
Our website collects some technical data automatically:
- IP address and general location (city/state level)
- Browser type and device information
- Pages you visit and how long you stay
- Links you click and forms you interact with
- Date and time of your visits
We use cookies and similar tracking tech for this. You can disable cookies in your browser settings, though some features might not work properly if you do.
How We Use Your Information
Short version: We use your data to run our education services, improve your experience, and keep you informed about courses and investing guides.
Specifically, we use your information to:
- Process your enrollment in courses and programs
- Send educational materials and course updates
- Answer your questions and provide support
- Improve our website and educational content
- Send newsletters about investing topics (you can opt out anytime)
- Analyze how people use our site to make it better
- Prevent fraud and maintain security
- Comply with legal requirements
We won't sell your personal information to third parties. That's not our business model, and honestly, it feels sketchy. Your data stays with us unless there's a legitimate reason to share it (more on that below).
Data Sharing and Third Parties
Sometimes we need to share your information with other companies to provide our services. Here's when that happens:
| Third Party Type | Purpose | Data Shared |
|---|---|---|
| Payment Processors | Handle course payments securely | Payment card details, billing address, transaction amount |
| Email Service Providers | Send course materials and updates | Email address, name, subscription preferences |
| Website Analytics | Understand site usage patterns | IP address, pages visited, device type |
| Cloud Storage Providers | Store data securely | All account information |
| Customer Support Tools | Manage inquiries efficiently | Contact details, message history |
All these partners are bound by confidentiality agreements. They can only use your data for the specific purposes we authorize.
Legal Requirements
We might disclose your information if required by Australian law, court orders, or government requests. We'll only share what's legally required and will notify you unless prohibited from doing so.
Your Privacy Rights
Under Australian privacy law, you have several rights regarding your personal information:
Access Your Data
Request a copy of all personal information we hold about you. We'll provide it in a readable format within 30 days.
Correct Inaccuracies
If your details are wrong or outdated, let us know. We'll update them promptly and notify any third parties if needed.
Delete Your Information
Ask us to remove your personal data. We'll comply unless we're legally required to keep it (like tax records).
Opt Out of Marketing
Unsubscribe from promotional emails anytime. You'll still receive essential service messages about your courses.
Restrict Processing
Limit how we use your data in certain situations, like when you're disputing accuracy.
Data Portability
Get your information in a structured format that you can transfer to another service provider.
To exercise any of these rights, contact us at [email protected]. We'll respond within 30 days. There's no fee unless your request is clearly unreasonable or excessive.
Data Security
We take security seriously. Your information is protected through:
- SSL encryption for all data transmitted through our website
- Secure servers with restricted access controls
- Regular security audits and vulnerability testing
- Employee training on data protection practices
- Encrypted backups stored in multiple secure locations
- Two-factor authentication for administrative access
Despite these measures, no internet transmission is completely secure. We do our best to protect your data, but we can't guarantee absolute security. If you suspect unauthorized access to your account, contact us immediately.
Data Retention
We keep your information for different periods depending on why we collected it:
- Active accounts: Retained while you use our services
- Inactive accounts: Deleted after 5 years of no activity
- Financial records: Kept for 7 years (Australian tax law requirement)
- Marketing communications: Removed immediately when you unsubscribe
- Support inquiries: Kept for 3 years for quality assurance
- Website analytics: Aggregated and anonymized after 26 months
When we delete data, it's removed from our active systems and backups within 90 days. Some information might persist in archived backups for up to one year before complete deletion.
International Data Transfers
Our servers are located in Australia, but some service providers operate from other countries. When your data leaves Australia, we ensure:
- The receiving country has adequate privacy protections
- Contractual safeguards are in place
- You're informed about where your data goes
- Your rights under Australian law remain protected
Most of our international transfers involve US-based cloud providers and email services. These companies have certified their compliance with international data protection standards.
Children's Privacy
Our services are designed for adults interested in investment education. We don't knowingly collect information from anyone under 18 years old. If you're under 18, please don't register or provide personal information.
If we discover we've accidentally collected data from someone under 18, we'll delete it promptly. Parents or guardians who believe we might have information about their child should contact us immediately.
Cookies and Tracking
We use several types of cookies:
- Essential cookies: Required for the website to function (login, security)
- Performance cookies: Help us understand how visitors use the site
- Functional cookies: Remember your preferences and settings
- Marketing cookies: Track your activity for targeted content (optional)
You can control cookie settings through your browser. Blocking essential cookies might affect site functionality. Most browsers accept cookies automatically, but you can change this in your settings.
Changes to This Policy
We update this privacy policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email or through a prominent notice on our website.
The "Last Updated" date at the top shows when we last modified this policy. Continuing to use our services after changes take effect means you accept the updated policy. If you disagree with changes, you can close your account and stop using our services.
Making a Complaint
If you're unhappy with how we've handled your personal information, please contact us first. We'll investigate and respond within 30 days.
If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Office of the Australian Information Commissioner
Website: www.oaic.gov.au
Phone: 1300 363 992
Email: [email protected]
Contact Us About Privacy
Questions about this privacy policy? Want to exercise your privacy rights? Get in touch:
Email: [email protected]
Phone: +61 7 3876 3386
Mail: Lumox, Illaroo Public School, 103 Illaroo Rd, North Nowra NSW 2541, Australia
We aim to respond to all privacy inquiries within 5 business days.