Back to Home

Privacy Policy

Last Updated: February 2026

At Lumen Atelier, we believe in privacy by default. We collect the absolute minimum amount of data required to do business. No tracking pixels, no data selling, no nonsense.

1. Information We Collect

We only collect information that you voluntarily provide when you:

  • Book a discovery call (Name, Email, Project details via Cal.com).
  • Send us an email or fill out a contact form.
  • Sign a contract for our services.
  • Subscribe to receive a free resource (Email address only, via our website popup or opt-in form).

2. How We Use Your Data

We use your data solely for:

  • Communicating with you about your project.
  • Invoicing and billing.
  • Delivering the services you hired us for.

3. Third-Party Services

We use trusted third-party providers to run our business. We do not control their privacy policies, but we select them carefully:

  • Vercel: For website hosting.
  • Cal.com: For scheduling meetings.
  • Proton Mail: For secure email communication.
  • Resend: For transactional email delivery when you request a free resource. See Resend's Privacy Policy.
  • Google Analytics 4: For anonymised website traffic analysis. See Section 5 for full details.
  • Bing Webmaster Tools: For search performance monitoring. Microsoft may collect anonymised crawl and indexing data. See Microsoft's Privacy Policy.

4. Free Tools — Image Processing

Our free tools (such as the Google Business Profile Photo Resizer) process all data entirely within your browser using the HTML5 Canvas API. Specifically:

  • No uploads: Images you select are never transmitted to or stored on our servers at any point.
  • Local processing only: All resizing and compression happens on your device using your browser's built-in capabilities.
  • Automatic deletion: All image data is permanently discarded from memory when you close or navigate away from the tool page.
  • Analytics only: We collect anonymised page visit data via Google Analytics 4 (e.g. page viewed, time on page) but no image content or file metadata is ever collected.

These tools are fully compliant with GDPR and applicable US privacy laws (CCPA) because no personal data or file data is collected, stored, or shared.

5. Email Marketing & Lead Magnets

When you submit your email address to receive a free resource (such as the GBP Audit Checklist), we collect and store your email address for the following purposes:

  • Delivering the requested resource — we send a one-time email containing the download link immediately after signup.
  • Occasional updates — we may send infrequent emails about new free tools, resources, or relevant local SEO tips. You can unsubscribe at any time.
  • No selling: Your email is never sold, rented, or shared with third parties for marketing purposes.

We use Resend (resend.com) as our email delivery provider. Your email address is stored securely on their platform. See Resend's Privacy Policy.

Popup behaviour: Our website uses a popup to offer free resources. The popup fires based on scroll depth or exit intent. A functional flag is stored in your browser's localStorage to prevent the popup from appearing more than once every 7 days. This flag contains no personal data and never leaves your device.

Unsubscribe: Every email we send contains an unsubscribe link. You can also request removal at lumenatilier@proton.me.

6. Google Analytics 4

We use Google Analytics 4 (GA4) to understand how visitors use our website and improve our services. This tool collects:

  • Anonymized visitor data (IP addresses are anonymized before storage)
  • Browser type, device type, operating system, and screen resolution
  • Pages visited, time spent on site, and navigation paths
  • Cookies: _ga (14 months), _gid (24 hours)

Data Processing: Data is processed by Google LLC in the US under the EU-US Data Privacy Framework. You can opt-out via browser settings or our cookie banner.

Opt-out: Disable Google Analytics by blocking google-analytics.com in your ad blocker or using Google's opt-out browser extension.

7. Cookies

We use minimal cookies necessary for site functionality (like performance monitoring). All analytics cookies require your consent via our cookie banner. We do not use advertising cookies to retarget you across the web.

8. Contact

If you have questions about your data, email us at lumenatilier@proton.me.

9. Compliance with Indian Law (DPDP Act 2023)

Lumen Atelier complies with India's Digital Personal Data Protection Act, 2023 (DPDP Act). As an Indian business, we are committed to processing personal data lawfully, transparently, and for specified purposes only.

  • Data minimisation: We collect only what is strictly necessary for the stated purpose.
  • Purpose limitation: Data collected for one purpose is never used for another without your consent.
  • Your rights: You have the right to access, correct, or request erasure of your personal data at any time.
  • Grievance Officer: For any data-related complaints, contact us at lumenatilier@proton.me. We will respond within 30 days as required under the Act.

For EU visitors, our data practices also align with GDPR requirements. Your GA4 analytics data is anonymised before storage and processed under the EU-US Data Privacy Framework.

Back to HomeTerms of Service →