How information is used for trial requests, order requests and support.
Draft last reviewed:
01
Microsoft Clarity, with your permission
If you accept analytics, Microsoft Clarity collects interactions (clicks, scrolling and navigation), technical information and page representations to produce heatmaps and session recordings. Microsoft processes this information for the service. The script is not loaded before acceptance, and advertising consent remains denied.
Trial and order form content and their confirmations are marked for masking. Our integration sends no custom customer identifiers. Clarity is not installed in the administrator area. Reject or withdraw permission using Cookie settings in the footer; withdrawal reloads the page to stop the active script. See Microsoft’s Privacy Statement at https://privacy.microsoft.com/privacystatement. Project processing regions and retention periods still need verification.
02
Who to contact
LumaTV is the brand shown on this website. Contact the email address on this page with privacy questions. The full legal identity and address of the organization responsible for processing remain to be confirmed before this policy is finalized.
03
Information processed
A trial request may include your email address or WhatsApp number, country, language, device, app, server preference and, when needed, MAC address. Trial requests are stored in the database with timestamps and notification status.
An order request includes your name, email, contact preference, WhatsApp number if selected, plan, duration, device count and payment preference. These details are stored in the database with the reference, calculated amount, currency, timestamps, and team and customer notification status. Notifications are also sent by email. The website does not request card numbers or banking credentials.
Hosting and security services may process technical information such as IP addresses and request logs. The administrator area has separate session and sign-in security controls.
04
Why this information is used
Information is used to review your request, prepare access, arrange setup and respond to you. Required fields are needed to handle the request. Where GDPR applies, the legal basis for each purpose still needs validation; requested pre-contractual steps and legitimate security interests are bases to assess. A service request is not blanket consent to advertising.
05
Service providers and WhatsApp
The current setup uses Vercel hosting, PostgreSQL through pg and SMTP configured for Zoho Mail. Cloudflare provides DNS and may perform other functions depending on deployment settings. Processing regions, provider agreements and international transfer safeguards remain to be confirmed.
Choosing WhatsApp opens a WhatsApp link containing your request details in a prefilled message. Those details are included in the URL sent to WhatsApp before you tap Send. The chat message itself is not sent automatically. WhatsApp has its own privacy practices; you can choose email instead.
06
Retention and protection
The application currently has no automatic deletion period configured for trial or order requests. A retention schedule for requests, emails, logs and backups still needs to be defined and implemented. Do not assume your information is deleted when the 24-hour trial ends.
The trial and order request lists are restricted to authenticated team members. No system can guarantee absolute security. Do not include banking passwords or other sensitive information in requests.
07
Your requests and rights
Contact us to request access to, correction of or deletion of your information. Depending on applicable law and conditions, you may also request restriction, object to processing, request portability or withdraw consent. Proportionate identity verification may be needed. Some records may need to be retained to meet legal obligations.
You may contact the relevant federal or provincial privacy authority, including the Office of the Privacy Commissioner of Canada or Québec’s Commission d’accès à l’information, where applicable.