Privacy Policy
Your privacy matters to us. This policy explains what data we collect, why we collect it, and how we keep it safe. If you have any questions, please contact us at hello@luumakids.com.
1. Who We Are
Luuma Kids is an online platform offering parenting resources, community features, digital products, and consulting services.
This website is operated by Invilara, Business ID 3507534-4, registered in Espoo, Finland ("we", "us", "our"). We act as the data controller under the EU General Data Protection Regulation (GDPR).
For privacy-related questions, contact us at: hello@luumakids.com
2. What Data We Collect
Account information
When you create an account, we collect your name, email address, encrypted password, and any information you submit through forms, community areas, or consultations.
Payment information
Payments are processed by Stripe and our membership system (Paid Member Subscriptions). We do not store full credit card information on our servers.
Usage data
We collect basic analytics such as pages visited, time spent on the site, and device information to improve our services.
Community content
Content you post in forums, groups, or messages is stored to enable platform functionality. You are responsible for the content you choose to share.
Cookies
We use cookies to keep you logged in, provide core functionality, and analyse website usage. Where required by law, we request consent for non-essential cookies.
3. How We Use Your Data
- To provide and operate our services
- To manage user accounts and memberships
- To process payments and transactions
- To send service-related communications
- To send marketing emails (only with your consent)
- To improve our platform and user experience
- To moderate community content and ensure platform safety
We do not sell your personal data.
4. How We Share Your Data
We share personal data only with trusted service providers necessary to operate Luuma Kids:
- Payment processing: Stripe
- Membership system: Paid Member Subscriptions (WordPress plugin)
- Hosting: Hostingpalvelu
- Analytics: Google Analytics
These providers act as data processors under GDPR and are contractually required to protect your data.
We may also disclose data if required by law or legal process.
5. International Data Transfers
Your data may be transferred and processed outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent legal protections are in place.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Keep you logged in
- Enable core website functionality
- Understand usage and performance
- Improve our services
Where required by law, we request your consent before placing non-essential cookies. You can manage cookies in your browser settings at any time.
7. Email Communications
We send transactional emails related to your account, orders, and membership. If you subscribe to marketing communications, you can unsubscribe at any time using the link in our emails or by contacting us directly.
8. Your Rights
Depending on your location, you may have the following rights:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (where applicable)
To exercise your rights, contact: hello@luumakids.com
You also have the right to lodge a complaint with your national data protection authority. In Finland: tietosuoja.fi
9. US Privacy Rights
If you are a resident of certain US states (including California), you may have rights to request access to or deletion of your personal information and to receive information about how it is used. We do not sell personal data.
10. Data Retention
We retain personal data only as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements.
If you delete your account, we will delete or anonymise your personal data within 30 days, unless we are legally required to retain it longer.
11. Children's Privacy
Luuma Kids is intended for parents and caregivers, not children. We do not knowingly collect personal data from children under 13 (US) or 16 (EU where applicable). If we become aware of such data, we will delete it immediately.
12. Security
We use industry-standard security measures including SSL encryption, secure authentication, and restricted access controls to protect your data. However, no system is 100% secure, and we cannot guarantee absolute security.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated via email or website notice. The "Last updated" date at the top of this page reflects the latest version.
14. Contact
If you have any questions about this Privacy Policy or your data, contact us at:
Invilara / Luuma Kids
Business ID 3507534-4
Espoo, Finland
Questions about your privacy or this policy?
Contact us →