LUMA CO.

Legal

Privacy Policy

At Luma Collective, we care about your privacy — whether we meet you online or face to face. Looking after your information is not just something we have to do; it is part of how we like to work.

We believe good work is built on trust. When you share your details with us, you are trusting us to handle them with care, and we take that seriously. Keeping your information private is in everyone's best interest — it protects you, it protects us, and it avoids any conflict of interest or awkward situations that can come from information ending up in the wrong place.

That is also why you will not find our customers' information, projects or logos shown off on our website or social pages. What you share with us stays between us.

The rest of this page sets out the finer details of how we collect, use and protect your personal information, in line with New Zealand's Privacy Act 2020. We have kept it as plain and clear as we can.

Who we are

Luma Collective ("we", "us", "our") is a New Zealand agency. This policy applies to our website at www.lumaco.co.nz and to the way we handle personal information across our business.

If you have any questions about this policy or about your information, you can reach us at [email protected].

What this policy covers

This policy explains what personal information we collect, why we collect it, how we use and store it, and the choices and rights you have. We follow the Privacy Act 2020 and its 13 Information Privacy Principles.

"Personal information" means any information about an identifiable person — for example your name, contact details, or anything else that could reasonably identify you.

The information we collect

We only collect information we genuinely need. Depending on how you deal with us, this may include:

  • Contact details such as your name, email address, phone number and business name.
  • Information you give us when you enquire, request a quote, or work with us on a project.
  • Billing and payment details needed to invoice you and keep our records.
  • Any messages or files you send us.
  • Basic technical information collected automatically when you visit our website, such as your IP address, browser type, and the pages you view.

We collect this information directly from you wherever we can. If we ever need to collect it from someone else, we will only do so where the Privacy Act allows.

How we use your information

We use your personal information to:

  • Respond to your enquiries and provide quotes.
  • Deliver our services and manage our work with you.
  • Send invoices and keep accurate financial records.
  • Keep in touch about your project or account.
  • Improve our website and the way we work.
  • Meet our legal and tax obligations.

We will only use your information for the reasons we collected it, or for a closely related reason you would reasonably expect. If we ever want to use it for something new, we will ask you first.

Marketing

If you have been in touch or worked with us, we may occasionally send you a helpful update or newsletter. You can opt out at any time — just click the unsubscribe link or reply and let us know, and we will take you off the list.

Cookies and our website

Like most websites, ours may use cookies and similar tools to help it work well and to understand how visitors use it. Cookies are small files stored on your device. You can turn them off in your browser settings, though some parts of the site may not work as smoothly if you do.

Sharing your information

We do not sell your information, and we do not share it for others to advertise to you.

We only share your information where we need to, and only with people who help us run our business — for example:

  • Trusted service providers such as our accounting, payment, hosting or email tools.
  • Professional advisers, where needed.
  • Government or legal authorities, if the law requires it.

Where we share information with a provider, we expect them to protect it to the same standard we do.

Sending information overseas

Some of the tools we use — for example cloud hosting or email — may store information on servers outside New Zealand. Where that happens, we take reasonable steps to make sure your information is protected by comparable privacy safeguards, as required by the Privacy Act.

Keeping your information safe

We take reasonable steps to protect your information from loss, misuse and unauthorised access. That includes sensible security measures and limiting access to those who need it. No system is ever completely secure, but we treat your information with care.

How long we keep it

We keep your information only as long as we need it for the reasons set out here, or for as long as the law requires (for example, tax records). When we no longer need it, we securely delete or de-identify it.

Your rights

Under the Privacy Act 2020, you have the right to:

  • Ask what personal information we hold about you.
  • Ask us to correct anything that is wrong.

Just get in touch and we will help. We may need to confirm your identity first. There is usually no charge, and we will respond within the timeframe the Privacy Act sets.

If something goes wrong

If you are ever concerned about how we have handled your information, please tell us — we would genuinely like the chance to put it right. You can email us at [email protected].

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner at www.privacy.org.nz or on 0800 803 909.

Changes to this policy

We may update this policy from time to time. When we do, we will post the latest version here with a new date below. We would encourage you to check back now and then.

Last updated: July 2026