Privacy Policy

This policy explains how Lumina Palm ("we") processes your personal data under the EU General Data Protection Regulation (GDPR).

Controller

Conscious Innovation Lab OÜ, Tööstuse tn 48, 10416 Tallinn, Estonia · hello@luminapalm.com

What we collect and why

• Quiz answers, first name, birth date — to create your personalized reading (contract performance, Art. 6(1)(b) GDPR).
• Email address — to deliver your reading and related messages (Art. 6(1)(b); marketing messages only with your consent, Art. 6(1)(a)).
• Palm photo — analyzed to create your reading. Your photo is stored securely and automatically deleted after 90 days. Note: the photo remains part of the reading delivered to you (web report and PDF).
• Order data — processed by our payment provider; we never see your full card details.

Processors we use

• Anthropic — AI analysis of your palm photo and generation of your reading.
• Stripe — payment processing.
• Netlify — website hosting and secure storage.
• n8n — email delivery automation.

Where processing happens outside the EU/EEA, it is safeguarded by EU standard contractual clauses.

Retention

Palm photos: 90 days. Readings and order records: as long as needed to provide the service and meet legal (e.g. tax) obligations.

Your rights

You can request access, correction, deletion, restriction, or a portable copy of your data, and object to processing, at any time: hello@luminapalm.com. You may lodge a complaint with your supervisory authority; in Estonia this is the Data Protection Inspectorate (AKI).

Analytics & advertising

We use the Meta Pixel and Conversions API to measure ad performance. Where required, this only happens with your consent. Purchase events are shared with hashed identifiers only.