Privacy Policy
What information we collect when you use lumireads.io, how we use it, and the choices you have.
LumiReads (“we”, “us”, “our”) respects your privacy. This policy explains what information we collect when you use lumireads.io, how we use it, and the choices you have.
1. Information we collect
Information you give us
- Your email address and name if you subscribe to our newsletter or contact us.
- Any content you submit, such as comments or messages.
- Account details, if you create an account.
Information collected automatically
- Device and browser type, IP address, approximate location, pages visited, time on site and referring pages.
- Cookies and similar technologies (see section 6).
2. How we use your information
- To operate, maintain and improve the website
- To send newsletters or updates you’ve asked for
- To respond to your enquiries
- To understand how readers use the site and make it better
- To detect and prevent fraud, spam and abuse
- To comply with legal obligations
3. Accounts, payments and membership
If you create an account we store your name, email address, a hash of your password and your email-verification status. You can also choose to add a username, profile photo, phone number (stored as an unverified number), time zone, region and notification preferences. If you turn on two-step verification, we store an encrypted authenticator secret and hashed backup codes. For each device you sign in on we keep the browser and device type, IP address and the time of last activity so you can review and sign out your active sessions.
We also store your saved books, reading progress, bookmarks, notes and reviews. Reviews and the name attached to them are visible to other readers.
PayPal processes membership payments. We store subscription identifiers, payment status and membership access dates, and we can show your PayPal payment history and receipts on your Account page. We do not receive or store your PayPal password or full payment-card details.
4. Legal bases (for visitors in the UK/EEA)
We process personal data based on your consent (e.g. newsletter sign-up), our legitimate interests (e.g. improving the site and keeping it secure), and legal obligations.
5. How we share information
We do not sell your personal information. We may share it with:
- Service providers who help us run the site, such as hosting, analytics, payment processing and email delivery.
- Advertising or affiliate partners, if applicable.
- Authorities, where required by law.
- A successor, if we are involved in a merger, acquisition or sale of assets.
6. Cookies and analytics
We use cookies to keep the site working, keep you signed in, remember your preferences and measure traffic. You can control or delete cookies in your browser settings. Where required, we ask for your consent before using non-essential cookies. Blocking some cookies may affect how the site works, and you may not be able to stay signed in.
Guest reading progress is stored in your browser, and clearing your browser storage removes it.
7. Data retention
We keep personal data only as long as needed for the purposes above, or as required by law. Newsletter data is kept until you unsubscribe. Account and reading information is kept while your account is maintained. Payment, security and support records may be kept longer to resolve disputes and meet legal obligations.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, object to or restrict certain processing, and withdraw consent at any time. You can update your profile, preferences and security settings, and delete your account, from your Account page. To exercise any other right, email support@lumireads.io with “Privacy request” in the subject line, from the email address on your account. We may need to verify your identity first. You can unsubscribe from emails at any time using the link in each message.
9. Security
We use reasonable technical and organisational measures to protect your data. No online service is completely secure, so we cannot guarantee absolute security.
10. International transfers
Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for these transfers.
11. Children’s privacy
LumiReads is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us information, contact us and we will delete it.
12. Third-party links
Our site may link to other websites. We are not responsible for their privacy practices.
13. Changes to this policy
We may update this policy from time to time. The “Effective date” above shows when it was last revised.
14. Contact us
LumiReads
Email: support@lumireads.io