Privacy Policy

01Who We Are

Lumnio is an IT services business operated by an individual sole trader based in Donnybrook, Victoria, Australia (ABN registered). We provide mobile app development, website development, SEO services and related digital services to businesses primarily in Melbourne and Victoria, and to clients across Australia.

This Privacy Policy applies to all personal information collected through our website at www.lumnio.com.au, through our contact form, via email, and in the course of providing our services.

02Information We Collect

Personal information you provide directly

When you contact us, fill out our enquiry form, or engage our services, we may collect:

• Your full name
• Email address
• Phone number (if provided)
• Business name and industry
• Project details, budget and timeline information you share with us
• Billing and payment information (processed securely via third-party payment providers)

Information collected automatically

When you visit our website, we may automatically collect:

• Your IP address and approximate geographic location
• Browser type and version
• Pages visited and time spent on each page
• Referring website or search query
• Device type (desktop, tablet, mobile)

This data is collected through cookies and analytics tools (see Section 6) and is used in aggregate to improve our website — it is not linked to your personal identity.

03How We Collect Your Information

We collect personal information through the following channels:

• Contact form — when you submit an enquiry via our website
• Email — when you email us directly at hello@lumnio.com.au
• Phone or video call — during discovery calls and project consultations
• Project delivery — information you share during the course of a project (e.g. business assets, logins, content)
• Cookies and analytics — automatically collected when you browse our website

We will never collect sensitive information (such as health, financial or government identifier information) without your explicit consent, and we will only do so if it is directly relevant to a service we are providing to you.

04How We Use Your Information

We use your personal information only for the purposes for which it was collected, including:

• Responding to your enquiry or consultation request
• Providing quotes, proposals and project scopes
• Delivering the mobile app, website, SEO or maintenance services you have engaged us for
• Sending project updates, invoices and communications relevant to your project
• Improving our website and services based on aggregated usage data
• Complying with our legal obligations under Australian law

Marketing communications

We may occasionally send you information about our services, tips or updates if you have opted in or if you are an existing client. You can unsubscribe at any time by replying to any email with "Unsubscribe" or contacting us directly. We do not send unsolicited marketing emails.

05Disclosure to Third Parties

We may share your information with trusted third-party service providers who assist us in operating our business, strictly on a need-to-know basis and under confidentiality obligations. These may include:

• Formspree — our contact form submission service (processes form data to deliver it to our email)
• Google Analytics / Google Search Console — website analytics (anonymised data only)
• Cloud storage providers — for project file storage (e.g. Google Drive)
• Payment processors — for invoicing and payment (e.g. Stripe, PayPal — if applicable)
• Email service providers — for sending and receiving project communications

We may also disclose your information if required to do so by law, a court order, or a regulatory authority in Australia.

We will never disclose your personal information to overseas recipients unless we have your consent, or unless required by law, and we take reasonable steps to ensure any overseas recipients handle your information in accordance with the Australian Privacy Principles.

06Cookies & Tracking

Our website uses cookies — small text files stored on your device — to improve your browsing experience and understand how visitors use our site.

Types of cookies we use

• Essential cookies — required for the website to function (e.g. remembering your form progress)
• Analytics cookies — Google Analytics collects anonymised data about pages visited, session duration and traffic sources to help us improve the site

Managing cookies

You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect website functionality. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is placed.

For information on managing cookies in popular browsers, visit the Help section of your browser (Chrome, Firefox, Safari, Edge).

07Data Storage & Security

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, unauthorised access, modification and disclosure. These steps include:

• Using HTTPS encryption for our website
• Storing project files on password-protected, encrypted cloud storage
• Limiting access to personal information to only those who need it to perform their work
• Using secure, reputable third-party tools for form processing and communications

While we take all reasonable precautions, no method of internet transmission or electronic storage is 100% secure. We encourage you to take care when sharing sensitive information online.

Data retention

We retain your personal information for as long as necessary to provide our services and comply with our legal obligations. Once information is no longer needed, we will securely destroy or de-identify it. Project files and client records are typically retained for 7 years in accordance with Australian tax and business record-keeping requirements.

08Your Rights & Access

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Correct any personal information that is inaccurate, out of date or incomplete
• Request deletion of your personal information (subject to our legal obligations to retain certain records)
• Opt out of receiving marketing communications at any time
• Complain about how we have handled your personal information

To exercise any of these rights, please contact us at the details in Section 11. We will respond to access and correction requests within 30 days. We may need to verify your identity before processing your request.

If we are unable to provide access to certain information (for example, because it would reveal another person's personal information), we will explain why in writing.

09Links to Other Websites

Our website may contain links to third-party websites (for example, LinkedIn, Google Business Profile, or client websites we reference in our portfolio). These websites have their own privacy policies and we are not responsible for their privacy practices.

We encourage you to review the privacy policy of any third-party website you visit through a link on our site.

10Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. When we make material changes, we will update the "Last Updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our website or services after any changes constitutes your acceptance of the updated policy.

If we make significant changes that affect how we handle your existing personal information, we will notify you directly by email where we hold your contact details.

11Contact Us & Complaints

If you have questions about this Privacy Policy, wish to access or correct your personal information, or want to make a complaint about how we have handled your data, please contact us:

Office of the Australian Information Commissioner (OAIC)

If you are not satisfied with how we have handled your complaint, you have the right to lodge a complaint with the OAIC, the Australian government body responsible for privacy regulation: