Privacy policy

This policy explains what we collect when you visit luma-harvest.com or join the LumaViva waitlist, why we collect it, and what you can ask us to do with it.

Last updated: 1 October 2026

1. Who we are

LumaViva is designed by LumaHarvest Technology Limited ("LumaHarvest", "we", "us"). We are the data controller for the information described in this policy — we decide how and why it is used.

For any privacy question, or to exercise any right described below, contact us at leonard@luma-harvest.com. We aim to respond within 30 days.

2. What we collect

Information you give us

When you submit the waitlist form, we receive the email address you enter. That is the whole of it. We do not ask for your name, phone number, postal address or payment details at this stage, and we do not request them in the form.

Information collected automatically

Like most websites, our hosting infrastructure records standard technical information when a page is served — such as your IP address, the pages requested and the time of the request. This is used to operate the site and to keep it secure.

If — and only if — you accept advertising cookies, we also collect information through the Meta Pixel as described in section 3.

What we do not collect

We do not collect special-category data (such as health, religious or political information), we do not collect payment card details on this website, and we do not knowingly collect information from anyone under 16. If you believe a child has submitted information to us, contact us and we will delete it.

3. Advertising cookies and the Meta Pixel

We use the Meta Pixel to measure how our advertising performs — how many people who see an ad go on to visit this site and join the waitlist. This helps us avoid wasting money on advertising that does not reach people who are actually interested.

The Pixel loads only after you accept advertising cookies. If you decline, or if you take no action, the Pixel is not loaded and no advertising cookies are set. Declining does not restrict the site in any way: you can browse and subscribe exactly as normal.

When the Pixel is active, Meta may receive your IP address, browser and device information, the page URL, and cookie identifiers, and may associate this activity with its own services. We have disabled Meta's automatic event configuration, which reduces what is collected by default.

We do not send the email address you enter in the waitlist form to Meta. The waitlist form posts directly to our email service provider (see section 4), not to Meta. The Pixel records a valid form submission attempt, not successful storage or a confirmed subscription. Meta may associate browsing and device data with its own services.

You can decline advertising cookies in the banner, or change your choice at any time using the "Advertising cookie settings" button at the bottom of any page. Your choice is stored in your browser for up to six months.

We treat Global Privacy Control (GPC) as a decline. If your browser sends a GPC signal, the Pixel will not load.

Declining stops future Pixel events from this site. It does not erase data that Meta may already have received. Meta's own handling of that data is governed by Meta's privacy policy.

4. How we use your email address

Your email address is stored and managed by Zoho Campaigns, our email service provider. They process it on our behalf and are not permitted to use it for their own purposes.

We use it to send you:

• Occasional progress updates while the product is in development — roughly once a month until launch;
• One heads-up before the early-bird window opens, so you have first access;
• Launch news, including when and where the campaign goes live.

We will not send you daily emails, and we will not pass your address to third parties for their own marketing. We do not sell, rent or trade your email address.

Confirming and leaving the list

After you submit the form, we send a confirmation email. Your subscription is only active once you click the link in that message. Our marketing emails contain an unsubscribe link, and unsubscribing stops future marketing emails unless you subscribe again. You can also email us at leonard@luma-harvest.com and we will remove you by hand.

5. Sharing

We share information only with the service providers that make this site and our emails work:

• Zoho Campaigns — email list hosting and delivery (your email address);
• Meta — advertising measurement, only if you accept advertising cookies (browsing and device data, not your email address);
• Our web hosting provider — serving the site (standard technical logs).

We may also disclose information if we are legally required to do so, or where it is necessary to protect our rights or the safety of others.

If LumaHarvest is ever involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction. We will notify you by email before your information becomes subject to a different privacy policy.

6. How long we keep it

We keep your email address for as long as you remain on the waitlist, and for up to 24 months after the campaign concludes or after you last interacted with one of our emails — whichever comes first. If you unsubscribe, we remove you from the active list immediately and retain only a minimal suppression record, so that we do not accidentally email you again.

7. Your rights

Depending on where you live, you may have some or all of the following rights. We extend the same requests to everyone, wherever you are:

• Access — ask us what information we hold about you;
• Correction — ask us to fix anything inaccurate;
• Deletion — ask us to erase your information;
• Portability — ask for a copy in a machine-readable format;
• Objection and restriction — object to, or ask us to limit, how we use your information;
• Withdraw consent — change your advertising cookie choice at any time, or unsubscribe from emails.

To make a request, email leonard@luma-harvest.com. We will not charge you and we will not treat you differently for making a request. We may need to confirm your identity before acting, which for a waitlist subscriber normally means confirming control of the email address in question.

If you are in the EEA or UK and are unhappy with our response, you have the right to complain to your national data protection authority. If you are in California, you may also contact the California Attorney General.

8. International transfers

We are based outside the United States, and our service providers operate globally. This means your information may be processed in a country other than your own, including the United States and the European Union. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses — to protect it.

9. Security

We use HTTPS across this site, restrict access to the waitlist to the people who need it, and rely on our providers' security controls for storage and delivery. No system is perfectly secure, but we work to keep the amount of information we hold deliberately small — which is the most effective protection of all. If we ever become aware of a breach affecting your information, we will tell you and the relevant authorities as required by law.

10. Changes to this policy

If we change this policy, we will update the date at the top. If the change is significant — for example, if we began using your email address for something new — we will tell you by email before it takes effect.