Privacy Policy
Last updated: 20 February 2026
1. Introduction
Welcome to Lume (“we,” “us,” or “our”). We operate the website located at lumemusic.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site or use our services.
Please read this policy carefully. If you disagree with its terms, please discontinue use of the Site.
2. Information We Collect
Information You Provide Directly
- Account information: Name, email address, username, and password when you register for an account.
- Payment information: Billing address and payment card details when you subscribe to a paid plan. Payment transactions are processed by a third-party payment processor; we do not store full card numbers on our servers.
- Communications: Messages, feedback, or support requests you send to us.
Information Collected Automatically
- Usage data: Pages visited, content viewed, features used, time spent on the Site, referring URLs, and click-stream data.
- Device and technical data: IP address, browser type and version, operating system, and device identifiers.
- Cookies and similar technologies: We use cookies, pixel tags, and similar tracking technologies to operate the Site and analyse usage. See Section 6 for more detail.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account.
- Process payments and fulfill orders.
- Deliver, personalise, and improve our content and services.
- Send transactional emails (e.g., receipts, password resets) and, where permitted, marketing communications.
- Analyse usage trends and measure the effectiveness of our content.
- Detect, investigate, and prevent fraudulent or unauthorised activity.
- Comply with legal obligations.
4. Legal Bases for Processing (International Users)
For users in the European Economic Area (EEA), United Kingdom, and other jurisdictions that require a lawful basis for processing personal data, we rely on the following:
- Contract: Processing necessary to provide you with our services.
- Legitimate interests: Analytics, security, and fraud prevention, where these interests are not overridden by your rights.
- Consent: Marketing communications and non-essential cookies, where required by law.
- Legal obligation: Compliance with applicable laws.
7. Data Retention
We retain your personal information for as long as your account is active or as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When retention is no longer necessary, we securely delete or anonymise your data.
8. Your Rights and Choices
Depending on your location, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Delete your personal information (“right to be forgotten”).
- Restrict or object to certain processing.
- Data portability: Receive your data in a structured, machine-readable format.
- Withdraw consent at any time where processing is based on consent.
- Opt out of marketing emails by clicking “unsubscribe” in any email or contacting us directly.
To exercise any of these rights, please contact us at privacy@lumemusic.com. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.
9. Children's Privacy
The Site is not directed to children under the age of 13 (or 16 where required by applicable law). We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.
10. International Data Transfers
Lume is operated from Aotearoa New Zealand. If you access the Site from outside this jurisdiction, your information may be transferred to and processed in a country with different data protection laws. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) for such transfers.
11. Security
We implement commercially reasonable technical and organisational measures to protect your information against unauthorised access, loss, or alteration. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
12. Third-Party Links
The Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the “Last updated” date and, where appropriate, by sending an email or displaying a notice on the Site. Your continued use of the Site after changes are posted constitutes your acceptance of the updated policy.
14. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us at:
Lume Music
615 New North Road
Morningside
Auckland 1021
New Zealand
privacy@lumemusic.com