Lumara — Privacy Policy

Our Approach to Privacy

Mind Lumen is private by design. We are a seeker-centric organization. We collect personal information only to validate that you are who you say you are and to operate our Services. We separate your personally identifiable information (PII) from your system identity — your PII is not disclosed to other users, including during the matching process. We do not extract value from your data, sell it, or use it for advertising.

This policy applies to all personal information collected through the Mind Lumen website, the Lumara platform, and all associated services (the "Services"), including seekers, practitioners, event attendees, and volunteers.

What We Collect

• Account information: Name, email, and login credentials.
• Profile information: Details you provide in your seeker or practitioner profile, such as professional credentials, location, areas of practice, or personal preferences relevant to the matching process.
• Certification information: Information practitioners submit as part of the ethics certification process, including self-reported professional details and supporting documentation.
• Payment information: Billing details for membership and certification fees, processed by our third-party payment provider. We do not store full payment card numbers.
• Usage information: How you interact with the Services, including pages visited and features used.
• Communications: Messages you send to us or through the Services.

How We Use It

We use your information to:

• Validate your identity.
• Operate and improve the Services.
• Process memberships and certification applications.
• Facilitate Lumara's harm and risk reduction navigation matching.
• Communicate with you about your account, membership, or certification.
• Comply with legal obligations.

Your PII is architecturally separated from your system identity within our platform. During the matching process, Lumara does not expose your PII to practitioners or seekers. We do not use your information for any purpose unrelated to our mission.

What We Will Never Do

• We will never sell your personal information. Not to advertisers, data brokers, or anyone else.
• We will never use your data for advertising. We do not run ads and do not share data with advertisers.
• We will never monetize your data. Our revenue comes from membership and certification fees — not from extracting value from the people we serve.
• We will never expose your PII during matching. Your personally identifiable information is separated from your system identity and is not shared with other users as part of the navigation or matching process.

When We Share Information

We share personal information only when:

• Service providers need it to help us operate (e.g., payment processing, hosting), under agreements requiring them to protect your data.
• Certification status is displayed to seekers. A practitioner's certification standing and score may be visible through the Services. Practitioners consent to this upon enrollment.
• Law requires it. When compelled by law, court order, or governmental authority.
• Safety demands it. If we believe in good faith that disclosure is necessary to protect someone's safety.

Your California Privacy Rights (CCPA)

As a California resident, you have the right to know what personal information we collect, access it, request deletion, and opt out of its sale. We do not sell personal information, so there is nothing to opt out of. We will not treat you differently for exercising your rights. To exercise any right, contact us. We will respond within 45 days.

Security, Retention, and Children

We use reasonable safeguards to protect your data. No system is completely secure, but we take protection seriously. We retain information as long as your account is active or as needed to provide the Services. If you close your account, we will delete or anonymize your information within a reasonable period unless legally required to retain it. Our Services are not intended for anyone under 18, and we do not knowingly collect information from minors.

Changes and Contact

We may update this policy. If we make material changes, we will notify you through the Services or by other reasonable means. If you have questions or wish to exercise your privacy rights, please contact us.