Privacy, handled with care.

Scope

Lumina Security is an Australian cybersecurity, AI security, risk, resilience, and governance advisory practice. This policy applies to personal information we collect through this website, including information submitted through our enquiry form, and communications you initiate with us.

We aim to handle personal information openly and responsibly. This policy is designed around the Australian Privacy Principles in the Privacy Act 1988 (Cth), where applicable.

Information we collect

When you make an enquiry, we may collect the information you choose to provide, including:

• your name, work email address, organisation, telephone number, and preferred contact method;
• the type of service you are interested in; and
• the details of your enquiry.

Our website hosting provider may also generate limited technical information needed to operate and secure the site, such as server logs, device or browser details, and IP address information.

Please do not submit passwords, security credentials, confidential client information, health information, or other sensitive personal information through the website enquiry form.

How we use personal information

We use personal information to respond to your enquiry, assess whether our services may be relevant, communicate with you about your request, maintain reasonable business records, and meet legal or regulatory obligations.

We do not use website enquiries for marketing unless you separately ask us to keep in touch or otherwise consent. We do not sell personal information.

Service providers and disclosure

We use carefully selected service providers to operate this website and respond to enquiries. At present, these include Microsoft Forms and Microsoft 365 for enquiry collection and email, and Microsoft Azure Static Web Apps for website hosting.

Personal information may be processed by these providers in accordance with their services and terms. Some processing or storage may occur outside Australia. We disclose personal information only where reasonably necessary to provide our services, where you have asked or agreed, or where required or authorised by law.

Security and retention

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These measures include using reputable cloud service providers and access controls appropriate to the information and service involved.

We retain personal information only for as long as reasonably needed for the purpose it was collected, to manage our business relationship, or to meet legal, accounting, or reporting obligations. We then delete or de-identify it where appropriate.

Access, correction, and complaints

You may ask for access to, or correction of, personal information we hold about you. You may also raise a privacy concern or complaint. Please contact us at info@luminasecurity.au and include enough detail for us to understand and investigate the request.

We will handle privacy concerns in a reasonable timeframe. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

Changes to this policy

We may update this policy when our practices, services, or legal obligations change. The current version will always be available on this page, with its last-updated date.