Privacy Policy

This policy is published by Lumeio Pty Ltd (76690415395) (“Lumeio”, “we”, “us”, “our”) and applies to personal information we collect through lumeio.com.au.

What this policy does not cover. Lumeio’s services involve processing regulated documents on behalf of client organisations, such as waste transport records, weighbridge dockets and building surveyor certification paperwork. That processing is governed by the terms of that client’s engagement with us, not by this page. If you are a client and want to know how your engagement data is handled, ask us and we will set out the terms that apply to it.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Information you give us. The contact form on the Site asks for:

If you email us directly, we collect whatever you choose to put in that email.

Information collected automatically. When you visit the Site, our hosting provider and analytics collect technical information including your IP address, browser type and version, device type, pages viewed, time spent, and the referring page. This is standard web traffic data.

What we ask you not to send. Please do not submit confidential client records, regulated documents or personal information about other people through the contact form. It is not a secure document channel. If a discussion progresses to that point, we will arrange an appropriate channel.

We do not collect sensitive information as defined in the Privacy Act (such as health, racial, political or biometric information) through this Site.

We use personal information collected through the Site to:

• respond to your enquiry and assess whether it is a fit for our services;
• communicate with you about a potential engagement;
• operate, secure and maintain the Site;
• understand how the Site is used, in aggregate, so we can improve it;
• meet our legal and record-keeping obligations.

We do not sell personal information. We do not use contact form submissions to build a marketing list without your consent, and we do not use your enquiry content to train machine learning models.

The Site uses Google Analytics 4 to measure traffic and understand which pages are useful. It sets cookies that record a randomised identifier, the pages you view and roughly where in the world you are. We see reports about groups of visitors, not identified individuals.

You can prevent this by using the Google Analytics opt-out browser add-on, by blocking cookies in your browser settings, or by browsing in private mode. Blocking cookies will not stop you reading the Site.

Our hosting provider and caching layer also set functional cookies that are necessary for the Site to load correctly and cannot be switched off without breaking it.

We disclose personal information only to:

Some of these providers may store or process data on servers outside Australia. By using the Site you acknowledge that information may be handled overseas, and that overseas recipients may be subject to laws that differ from Australian privacy law. We take reasonable steps to ensure providers handle information consistently with the Australian Privacy Principles, in line with APP 8 on cross-border disclosure.

We keep contact form submissions and enquiry correspondence for [RETENTION PERIOD] from our last contact with you, after which they are deleted, unless we are required to keep them longer or they relate to an ongoing engagement.

Analytics data is retained according to the retention period configured in Google Analytics. Server logs are retained on our hosting provider’s standard schedule.

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, in line with APP 11. These include serving the Site over an encrypted HTTPS connection, keeping WordPress and its components updated, restricting administrative access to people who need it, and using multi-factor authentication where available.

No method of transmitting information over the internet is completely secure. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

Under APP 12 and APP 13 you can ask us for access to the personal information we hold about you, and ask us to correct it if it is wrong or out of date.

Email jumei@lumeio.com.au with enough detail for us to find the record. We aim to respond within two business days and to deal with the request within 30 days. There is no charge for making a request. If we refuse access or correction, we will tell you why in writing and explain how to complain.

You can also ask us to delete an enquiry you sent. We will do that unless we are required to keep it.

Under APP 2 you have the option of not identifying yourself when dealing with us, where that is lawful and practicable. You can read the entire Site without giving us any personal information. We cannot reply to an anonymous enquiry, because a reply needs somewhere to go.

We do not send unsolicited marketing email. If we ever introduce a mailing list, it will be opt-in, every message will carry an unsubscribe link, and unsubscribing will take effect promptly, consistent with APP 7 and the Spam Act 2003 (Cth).

If you think we have mishandled your personal information, email jumei@lumeio.com.au with the details. We will acknowledge your complaint, investigate it, and respond in writing, normally within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, which can investigate privacy complaints about organisations covered by the Privacy Act.

We may update this policy as our practices or the law change. The current version is always on this page, and the “last updated” date records when it last changed. If we make a change that materially affects how we handle information we already hold about you, we will take reasonable steps to tell you.