Privacy Policy
Effective Date: January 22, 2026
This privacy policy describes how Luminova Ventures Limited (“we”, “us”, “our”) collects, uses, and shares personal information of users of our website, luminova.ventures (the “Website”). We are committed to protecting your privacy and ensuring the security of your personal information in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant privacy regulations.
Data Controller
Luminova Ventures Limited is the data controller responsible for your personal information. For any privacy-related inquiries, please contact us at contact.
Information We Collect
We collect the following types of information:
1. Information You Provide Directly to Us:
- Account Information: Name, email address, username, password, and profile information when you register for an account
- Payment Information: Billing address and payment method details (processed securely by third-party payment processors)
- Transaction Information: Purchase history, order details, and subscription information
- Communication Information: Information you provide when you contact us, subscribe to our newsletter, or participate in surveys, forums, or community features
- Identity Verification: Government-issued ID or other documents if required for compliance purposes (cryptocurrency transactions may be subject to Know Your Customer requirements)
- User-Generated Content: Comments, reviews, testimonials, and other content you post on our Website
2. Information We Collect Automatically:
- Device and Browser Information: IP address, browser type and version, operating system, device type, unique device identifiers
- Usage Data: Pages you viewed, time spent on pages, links clicked, referring website URLs, dates and times of visits, and browsing patterns
- Location Data: General geographic location based on your IP address
- Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixels, and similar technologies (see Cookies section below)
3. Information from Third Parties:
- Payment Processors: Transaction confirmations, payment status, and fraud prevention data from Stripe and cryptocurrency payment processors
- Analytics Providers: Usage statistics and demographic information from Google Analytics and similar services
- Social Media Platforms: If you link your social media accounts, we may receive public profile information
- Marketing Partners: Information about your interactions with our advertisements on third-party platforms
Payment Information and Third-Party Processors
Stripe Payments:
- When you make payments via credit/debit card, SEPA, or bank transfer, your payment information is processed directly by Stripe, Inc.
- We do not store your complete payment card details on our servers
- Stripe collects and processes: card number, expiration date, CVV, billing address, and transaction details
- Stripe is PCI DSS Level 1 certified and complies with strict data security standards
- We receive from Stripe: transaction confirmations, last 4 digits of card number, payment status, and fraud prevention scores
- Stripe’s privacy practices are governed by their Privacy Policy: stripe.com/privacy
Cryptocurrency Payments:
- When you pay with cryptocurrency, we collect: wallet addresses, transaction hashes, and blockchain transaction records
- Cryptocurrency payments are processed through third-party crypto payment processors
- We do not store your private keys or seed phrases
- Blockchain transactions are permanently recorded on public ledgers and cannot be deleted
- We may use Know Your Transaction (KYT) screening tools to comply with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations
- KYT screening may involve sharing transaction data with compliance service providers
- We may be required to report suspicious transactions to relevant authorities
Legal Basis for Processing (GDPR)
We process your personal information based on the following legal grounds:
- Consent (Article 6(1)(a) GDPR): When you sign up for our newsletter, accept cookies, create an account, or provide explicit consent for specific processing activities. You may withdraw consent at any time.
- Contract (Article 6(1)(b) GDPR): To process your orders, deliver products and services, manage your account, process payments, and fulfill our contractual obligations to you.
- Legitimate Interest (Article 6(1)(f) GDPR): To improve our services, conduct analytics, personalize your experience, prevent fraud and security threats, protect our legal rights, and ensure the security of our Website. We have assessed that these interests do not override your fundamental rights and freedoms.
- Legal Obligation (Article 6(1)(c) GDPR): To comply with applicable laws, tax requirements, accounting obligations, anti-money laundering regulations, and legal processes (court orders, subpoenas).
How We Use Your Information
We use your information for the following purposes:
Service Delivery and Account Management:
- Provide, operate, and maintain our Website and services
- Process and fulfill your orders, subscriptions, and payments
- Create and manage your account
- Deliver purchased products, courses, and digital content
- Provide customer support and respond to your inquiries
- Verify your identity when necessary
Communication:
- Send transactional emails (order confirmations, account notifications, password resets)
- Send newsletters and marketing communications (where permitted by law and with your consent)
- Notify you of product updates, new features, and service improvements
- Request feedback and conduct surveys
Personalization and Improvement:
- Personalize your experience and content recommendations
- Analyze usage patterns and conduct research to improve our services
- Test new features and optimize Website performance
- Understand user preferences and behavior
Security and Fraud Prevention:
- Detect, prevent, and investigate fraud, security breaches, and illegal activities
- Screen cryptocurrency transactions for compliance with AML/CTF regulations
- Monitor for suspicious account activity
- Protect our legal rights and enforce our Terms and Conditions
Legal Compliance:
- Comply with tax, accounting, and financial reporting requirements
- Respond to legal requests, court orders, and law enforcement inquiries
- Maintain records for audit purposes
- Fulfill regulatory obligations related to payment processing
Marketing and Analytics:
- Deliver targeted advertisements based on your interests (with your consent)
- Measure the effectiveness of our marketing campaigns
- Conduct market research and competitive analysis
How We Share Your Information
We may share your information with the following types of third parties. We require all third parties to respect the security of your personal data and treat it in accordance with the law.
Service Providers:
- Payment Processors: Stripe (for card payments), cryptocurrency payment processors (for crypto payments)
- Email Service Providers: Mailchimp, SendGrid, or similar services for sending newsletters and transactional emails
- Cloud Hosting: AWS, Google Cloud, or other hosting providers for storing data and running our Website
- Analytics Providers: Google Analytics, Hotjar, or similar services for usage analytics and website optimization
- Customer Support: Help desk software providers for managing support tickets
- Content Delivery Networks (CDNs): For faster content delivery worldwide
- Compliance and Fraud Prevention: KYT/AML screening services for cryptocurrency transactions
These service providers are contractually obligated to protect your data, use it only for the purposes we specify, and not share it with others.
Business Partners:
- We may share limited information with select business partners who offer products or services that may be of interest to you
- We will only share data with your explicit consent or where we have a legitimate interest
- You may opt out of such sharing at any time
Legal Authorities and Law Enforcement:
- We may disclose information to legal authorities, law enforcement, courts, or other government entities when:
- Required by law, legal process, subpoena, or court order
- Necessary to comply with regulatory obligations (e.g., AML/CTF reporting)
- Required to protect our rights, property, or safety, or that of our users or the public
- Necessary to investigate fraud, security breaches, or illegal activities
Business Transfers:
- If we are involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your information may be transferred as part of that transaction
- We will notify you via email and/or prominent notice on our Website of any such change
Aggregated or Anonymized Data:
- We may share aggregated, anonymized, or de-identified information that does not directly identify you for research, marketing, analytics, or other purposes
With Your Consent:
- We may share your information with third parties when you provide explicit consent for specific purposes
International Data Transfers
Your information may be transferred to, stored, and processed in countries outside the European Economic Area (EEA), United Kingdom, or your country of residence, including the United States, where our servers and service providers are located.
When we transfer personal data internationally, we ensure adequate protection through:
- Standard Contractual Clauses (SCCs): We use SCCs approved by the European Commission for transfers to countries without adequacy decisions
- Adequacy Decisions: We rely on adequacy decisions recognizing that certain countries provide equivalent data protection standards
- Data Processing Agreements: We require all service providers to enter into contracts that include appropriate data protection safeguards
- Privacy Shield (where applicable): For U.S.-based service providers that are certified under relevant frameworks
- Binding Corporate Rules: For transfers within corporate groups
You may request a copy of the safeguards we have in place by contacting us at contact.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy and comply with our legal obligations:
- Account Data: As long as your account remains active, plus 30 days after account closure to allow for reactivation
- Transaction Records: 7 years from the date of transaction to comply with tax, accounting, and financial regulations
- Payment Information: Tokenized payment data retained for recurring subscriptions until you cancel; full payment details stored only by payment processors
- Cryptocurrency Transaction Records: Permanently recorded on public blockchains (beyond our control); our internal records retained for 7 years
- Marketing Consent and Communications: Until you unsubscribe, withdraw consent, or request deletion
- Website Analytics Data: 26 months from collection
- Customer Support Records: 3 years from the date of the last interaction
- Legal Claims: As long as necessary to establish, exercise, or defend legal claims (statute of limitations period)
- Compliance Records: As required by applicable laws and regulations (e.g., AML records for 5-7 years)
After the retention period expires, we will securely delete or anonymize your personal information in accordance with applicable data protection laws.
Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device when you visit a website.
Types of Cookies We Use:
- Strictly Necessary Cookies: Essential for the Website to function properly (e.g., authentication, security, load balancing). These cannot be disabled.
- Performance Cookies: Collect information about how you use our Website (e.g., pages visited, errors encountered) to help us improve performance. Examples: Google Analytics.
- Functionality Cookies: Remember your preferences and choices (e.g., language, region) to provide a personalized experience.
- Targeting/Advertising Cookies: Track your browsing activity to deliver relevant advertisements on our Website and third-party platforms. Examples: Facebook Pixel, Google Ads.
Cookie Consent:
We obtain your prior consent before placing non-essential cookies on your device, in compliance with the GDPR and ePrivacy Directive. You can manage your cookie preferences through:
- Our Cookie Settings panel (displayed when you first visit our Website)
- Your browser settings (most browsers allow you to refuse cookies)
- Opt-out tools provided by advertising networks
You may withdraw your cookie consent at any time. However, disabling cookies may limit your ability to use certain features of our Website.
Third-Party Cookies:
Some cookies are placed by third-party services that appear on our pages. We do not control these third-party cookies. Please review the privacy policies of these services:
Do Not Track (DNT):
We currently do not respond to Do Not Track signals from browsers, as there is no industry standard for how to interpret such signals.
Data Security
We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, use, disclosure, alteration, or destruction.
Security Measures Include:
- Encryption: We use SSL/TLS encryption to protect sensitive information during transmission over the internet
- Secure Servers: Your data is stored on secure servers with firewalls, intrusion detection systems, and access controls
- Access Controls: We limit access to your information to authorized personnel who need it to perform their duties and who are bound by confidentiality obligations
- Password Protection: User passwords are hashed and salted using industry-standard algorithms
- Regular Security Audits: We regularly review and update our security practices to address new threats
- Employee Training: Our employees receive training on data protection and security best practices
- Incident Response: We have procedures in place to detect, respond to, and recover from security incidents
Payment Security:
- Credit card data is processed by PCI DSS compliant payment processors (Stripe)
- We do not store complete credit card numbers on our servers
- Cryptocurrency private keys are never stored or transmitted through our systems
However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.
Data Breach Notification:
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours, as required by the GDPR.
Your Rights
You have the following rights with respect to your personal information under applicable data protection laws:
1. Right to Access (Article 15 GDPR):
- You have the right to obtain confirmation of whether we process your personal data and to receive a copy of the data we hold about you
- You may request information about the purposes of processing, categories of data, recipients, retention periods, and your other rights
2. Right to Rectification (Article 16 GDPR):
- You have the right to correct your information if it is inaccurate or incomplete
- You can update most information directly through your account settings
3. Right to Erasure / Right to be Forgotten (Article 17 GDPR):
- You have the right to request deletion of your personal data, subject to legal retention requirements
- We may be required to retain certain data for tax, accounting, fraud prevention, or legal compliance purposes
- Blockchain records cannot be deleted as they are permanently recorded
4. Right to Restrict Processing (Article 18 GDPR):
- You have the right to request that we limit the processing of your information in certain circumstances (e.g., while we verify its accuracy)
5. Right to Data Portability (Article 20 GDPR):
- You have the right to receive your personal data in a structured, commonly used, machine-readable format
- You may request that we transmit your data directly to another controller where technically feasible
6. Right to Object (Article 21 GDPR):
- You have the right to object to the processing of your information for certain purposes, including direct marketing and processing based on legitimate interests
- You can unsubscribe from marketing emails by clicking the “unsubscribe” link in any marketing email
7. Right to Withdraw Consent (Article 7(3) GDPR):
- Where processing is based on consent, you have the right to withdraw your consent at any time
- Withdrawal does not affect the lawfulness of processing before withdrawal
8. Right to Lodge a Complaint (Article 77 GDPR):
- You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated
- For EU users, you can find your supervisory authority at: edpb.europa.eu/about-edpb/board/members_en
9. Automated Decision-Making (Article 22 GDPR):
- You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects
- We may use automated fraud detection systems, but you can request human review of any automated decision
How to Exercise Your Rights:
To exercise any of these rights, please contact us at contact. We will respond to your request within 30 days (as required by GDPR). We may request additional information to verify your identity before processing your request.
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You may request information about the personal information we collect, use, disclose, and sell (if applicable)
- Right to Delete: You may request deletion of your personal information, subject to exceptions
- Right to Opt-Out of Sale: We do not sell your personal information to third parties. If this changes, we will provide an opt-out mechanism
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
- Right to Limit Use of Sensitive Personal Information: You may request that we limit the use of sensitive personal information
To exercise these rights, please contact us at contact or call our toll-free number (if applicable).
Do Not Sell My Personal Information
We do not sell your personal information to third parties for monetary consideration. We may share information with service providers and business partners as described in this policy, but such sharing does not constitute a “sale” under CCPA.
Children’s Privacy
Our Website and services are not directed to individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children.
If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at contact. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.
Third-Party Links and Services
Our Website may contain links to third-party websites, applications, or services that are not operated by us. This privacy policy does not apply to third-party services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you visit or use.
Changes to this Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on our Website with a new “Effective Date”
- Sending an email notification to your registered email address (for material changes)
- Displaying a prominent notice on our Website
Material changes will take effect 30 days after notification. Your continued use of our Website or services after the changes take effect constitutes your acceptance of the updated policy. We encourage you to review this privacy policy periodically.
Contact Us
If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us at:
Data Protection Officer:
If you have questions specifically related to data protection, you may contact our Data Protection Officer (if appointed) at the above address.
Supervisory Authority (EU/EEA Users):
If you are located in the EU/EEA and have concerns about our data practices, you may contact your local data protection authority.
Last Updated: January 22, 2026
