Privacy Policy

At Lumina Notes, located at Larcom Street, London, City of London, SE17 1RT, United Kingdom, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our online platform, purchase products, register for services, or interact with us.

Information We Collect

We collect various types of information to provide and improve our services to you.

• Personal Data You Provide Directly: This includes information you submit when you make a purchase, create an account, sign up for music lessons, rent our live performance space, or contact us. This may include your name, email address, postal address, phone number, and payment information.
• Transaction Data: Details about the products and services you have purchased from us, such as new and used instruments, sheet music, music accessories, instrument repairs, and music lessons.
• Communication Data: Records of your communications with us, including emails and inquiries sent through our online platform.
• Usage Data: Information about how you access and use our site, such as your IP address, browser type, operating system, referral sources, pages viewed, and the dates/times of your visits. This helps us understand what content is most popular and how we can improve.
• Cookies and Tracking Technologies: Our site uses cookies and similar tracking technologies to improve your browsing experience, analyze site usage, and support marketing efforts. For more details, please see our "Cookie Policy" section below.

How We Use Your Information

We use the information we collect for various purposes, including:

• To Provide and Manage Services: Processing your orders for instruments, sheet music, accessories, and repairs; enrolling you in music lessons; managing live performance space rentals; and delivering purchased items.
• To Communicate With You: Sending order confirmations, updates about your purchases or lessons, responses to your inquiries, and other service-related communications.
• For Marketing and Promotional Purposes: With your consent, sending you newsletters, special offers, and information about new products or services that may be of interest to you. You can opt-out at any time.
• To Improve Our Site and Services: Analyzing usage patterns to enhance our online platform, optimize product offerings, and develop new services based on customer preferences.
• For Security and Fraud Prevention: Protecting our site, customers, and business from fraudulent activities and unauthorized access.
• To Comply with Legal Obligations: Fulfilling our legal and regulatory requirements.

Legal Basis for Processing Personal Data (GDPR)

We process your personal data based on the following legal grounds:

• Performance of a Contract: When we need to process your data to fulfill our contractual obligations, such as processing your purchase or lesson registration.
• Legitimate Interests: When the processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This includes improving our services, preventing fraud, and marketing our products and services.
• Consent: In specific situations, we may ask for your explicit consent to process your data, for example, for sending you marketing communications. You have the right to withdraw consent at any time.
• Legal Obligation: When we need to comply with a legal or regulatory obligation.

Disclosure of Your Information

We may share your information with trusted third parties under specific circumstances:

• Service Providers: We work with third-party service providers who assist us in operating our business, such as payment processors, shipping companies, IT support, and marketing services. These providers are bound by contractual obligations to keep your information confidential and use it only for the purposes for which we disclose it to them.
• Legal Compliance and Protection: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We may also disclose information to enforce our terms of service, protect our rights, privacy, safety, or property, or that of our affiliates, customers, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction.

International Data Transfers

As a United Kingdom-based company, your data will primarily be processed within the European Economic Area (EEA). However, some of our third-party service providers may process data outside the EEA. When this occurs, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, to guarantee your data receives a similar level of protection.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

Your Data Protection Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• The Right to Access: You have the right to request copies of your personal data.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
• The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the contact details provided below. We will respond to your request within one month.

Security of Your Data

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

Links to Other Websites

Our site may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

Our services are not intended for anyone under the age of 16. We do not knowingly collect personally identifiable information from anyone under 16. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from anyone under the age of 16 without verification of parental consent, we take steps to remove that information from our servers.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us through our postal address:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.