Privacy Policy

1. Introduction

Lumina Code ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you interact with our AI integration services.

Our office is located at Suite 9-12, Menara Hap Seng, Jalan P. Ramlee, 50250 Kuala Lumpur, Malaysia. We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and maintain appropriate safeguards for personal information.

For questions about this Privacy Policy or our data practices, contact us at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly when you:

• Contact us through forms or email
• Request information about our services
• Engage us for consulting or implementation work
• Subscribe to communications
• Participate in surveys or feedback processes

This information may include your name, email address, phone number, company name, job title, and any details you share in messages or inquiries.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information through cookies and similar technologies:

• Device and browser information
• IP address and general location
• Pages visited and time spent
• Referral sources
• Usage patterns and preferences

For details about cookies, see our Cookie Policy.

3. How We Use Your Information

3.1 Service Delivery

We use your information to:

• Respond to inquiries and provide requested information
• Deliver consulting and implementation services
• Communicate about projects and service matters
• Process payments and maintain records
• Provide technical support and assistance

3.2 Business Operations

We process data for legitimate business purposes including:

• Understanding how visitors use our website
• Improving our services and content
• Conducting internal analysis and planning
• Maintaining security and preventing fraud
• Complying with legal obligations

3.3 Communications

With your consent, we may send you:

• Service updates and project communications
• Information about our services
• Industry insights relevant to AI integration

You can opt out of marketing communications at any time by contacting [email protected].

4. Legal Basis for Processing

We process personal data based on:

• Consent: When you provide explicit permission for specific processing activities
• Contract: When processing is necessary to fulfill service agreements
• Legitimate Interest: When processing serves our business operations without overriding your privacy rights
• Legal Obligation: When required by Malaysian law or regulations

5. Data Sharing and Disclosure

5.1 Service Providers

We may share information with trusted service providers who assist with:

• Website hosting and maintenance
• Email and communication services
• Analytics and performance monitoring
• Payment processing

These providers are contractually obligated to protect your information and use it only for specified purposes.

5.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal obligations or court orders
• Protect our rights and property
• Prevent fraud or security threats
• Protect the safety of individuals

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change and the choices you have regarding your information.

6. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and updates
• Employee training on data protection
• Incident response procedures

While we maintain strong security measures, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but will promptly notify affected individuals and relevant authorities of any data breach as required by law.

7. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specific retention periods include:

• Client project records: 7 years from project completion
• Communication records: 3 years from last contact
• Website analytics data: 26 months
• Financial records: As required by Malaysian tax regulations

When data is no longer needed, we securely delete or anonymize it.

8. Your Rights

Under the Personal Data Protection Act 2010 and applicable regulations, you have the right to:

• Access: Request information about personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Withdrawal of Consent: Withdraw previously given consent for processing
• Restriction: Request limitation of processing in certain circumstances
• Data Portability: Request transfer of data to another service provider
• Objection: Object to processing based on legitimate interests
• Complaint: Lodge a complaint with the Personal Data Protection Commissioner

To exercise these rights, contact us at [email protected]. We will respond within 21 days as required by Malaysian law.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected information from someone under 18, we will delete it promptly.

11. International Data Transfers

We primarily process data within Malaysia. If data is transferred internationally, we ensure appropriate safeguards are in place through standard contractual clauses or other approved mechanisms.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last Updated" date.

Significant changes will be communicated through email notification to registered users or a prominent notice on our website.