Privacy Policy

1. Introduction

Lumora Arc ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website lumora-arc.com and use our services.

By using our website or services, you consent to the data practices described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect personally identifiable information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number, postal address)
• Country or region of residence
• Travel preferences and cultural interests
• Group size and special requirements
• Communication preferences
• Payment information (processed securely through third-party providers)

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information:

• IP address and location data
• Browser type and version
• Device information
• Pages visited and time spent on our site
• Referring website
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our services
• To process your inquiries and booking requests
• To communicate with you about our services
• To customize and improve your experience
• To send you marketing communications (with your consent)
• To comply with legal obligations
• To protect our rights and prevent fraud

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for us to process your personal data for specific purposes
• Contract: When processing is necessary for the performance of a contract with you
• Legal Obligation: When we need to comply with legal requirements
• Legitimate Interest: When we have a legitimate business interest that does not override your rights

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third parties who assist us in operating our website and providing services
• Cultural Partners: With venues and cultural institutions to arrange your experiences
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with any merger, sale, or transfer of assets

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure data transmission using SSL encryption
• Regular security assessments and updates
• Access controls and staff training
• Secure data storage and backup procedures

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. You can control cookie settings through your browser preferences. Our use of cookies includes:

• Essential Cookies: Necessary for website functionality
• Performance Cookies: To analyze website usage and improve performance
• Functional Cookies: To remember your preferences
• Marketing Cookies: To deliver relevant advertisements (with your consent)

8. Your Rights

Under applicable data protection laws, you have the following rights:

• Access: Request access to your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restriction: Request restriction of processing
• Portability: Request transfer of your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us using the information provided below.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Factors affecting retention periods include:

• The nature of the services provided
• Legal and regulatory requirements
• The need to resolve disputes
• Business operational needs

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including:

• Adequacy decisions by relevant authorities
• Standard contractual clauses
• Other approved transfer mechanisms

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our services after any changes constitutes acceptance of the new Privacy Policy.

13. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. Supervisory Authority

If you are located in the European Economic Area, you have the right to lodge a complaint with your local data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).