This policy explains what personal data lumination.ai collects, why, who receives it and what rights you have. It covers this website only. Our products (AI Tutor, NoteGPT, SMMRY, Socratic App and others) have their own privacy policies, and the Lumination API is covered by the API Privacy Policy.
Who is responsible for your data
Lumination AI Ltd is the controller of the personal data collected through this website. We are a company registered in England and Wales (company number 15291725) and registered with the Information Commissioner’s Office (registration number ZC110820).
You can write to Lumination AI Ltd, 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom, or email [email protected].
What we collect and why
- Contact form. When you write to us, your name, email address, the topic you choose and your message are sent to our team inbox. We use them to reply and, if we end up working together, to manage that relationship.
- Booking a call. If you book a call through our scheduling link, Google Calendar handles the booking and we receive the name, email address and any notes you add.
- Site analytics. Google Analytics measures how the site is used, such as pages visited, approximate location, device and browser. It only runs if you accept analytics cookies. We use it to understand which content is useful, never to identify you.
- Security and delivery. Our hosting provider and Cloudflare process technical data such as your IP address and browser details to deliver the site and protect it from abuse.
- Free tools. The AI literacy assessment, the AI policy generator and the EU AI Act risk checker run in your browser. We do not receive the answers you enter.
- Embedded videos. Some pages show YouTube videos in privacy-enhanced mode. YouTube receives data about you only when you play a video.
We do not sell your data, use it for advertising or build profiles about you.
Legal basis
- Replying to your message or booking, and any steps you ask for before a contract, rely on your request and on our legitimate interest in answering it.
- Analytics cookies rely on your consent, which you give or refuse in the cookie banner.
- Security and delivery rely on our legitimate interest in running a safe, working website.
Who receives your data
We only share your data with the service providers that keep the site running, who process it on our behalf and under contract. These are our web hosting provider, Cloudflare, our email provider, and Google (for Analytics, Calendar and YouTube). We may also disclose data where the law requires it.
Some of these providers may process data outside the UK and the European Economic Area. Where they do, we rely on adequacy regulations, the EU-US Data Privacy Framework and its UK Extension, or standard contractual clauses to protect your data.
How long we keep it
Contact messages, bookings and related emails are kept while the conversation or working relationship lasts. If there is no further contact, we delete them after five years at most. Google Analytics data is kept for the retention period set in our Analytics account, which is 14 months at most.
Cookies
The site uses a small number of cookies. Analytics cookies are only set if you accept them in the cookie banner. You can change your choice at any time with the cookie settings link in the footer, or block and delete cookies in your browser settings.
| Cookie | Provider | Purpose | Type | Lasts |
|---|---|---|---|---|
| lai_consent | Lumination AI | Remembers your cookie choice | Strictly necessary | 6 months |
| __cf_bm | Cloudflare | Tells people and bots apart to protect the site | Strictly necessary | 30 minutes |
| _ga, _ga_7G668E60FZ | Google Analytics | Counts visits and measures how the site is used | Analytics, only with your consent | Up to 2 years |
Your rights
You can ask to access, correct or delete your data, to restrict or object to how we use it, and to receive a copy in a portable format. Where we rely on your consent, you can withdraw it at any time. Email [email protected] and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office. If you live in the European Union, you can also contact your local data protection authority. We would appreciate the chance to put things right first.
Changes to this policy
We update this policy when the way we handle data changes. This version is dated 20 October 2026.