Privacy Policy

Scope

This policy explains how Lumen Advisory handles information submitted through this website, the free audit form, the contact form, and the client portal. It does not replace a client services agreement or a third-party provider’s own privacy terms.

Information We Collect

We collect information you choose to provide and limited technical information needed to operate and protect the site.

• ●Contact information such as your name, business name, email address, and phone number.
• ●Contact-form messages and communications with Lumen Advisory.
• ●Audit information such as your website, industry, revenue range, team size, business tools, workflows, goals, budget range, and operational challenges.
• ●Your required legal acknowledgment, optional email and call/text marketing choices, the policy version shown to you, and the time your choices were recorded.
• ●Client-portal account, access, and file information when portal features are used.
• ●Basic request and security information such as IP address, browser or device details, timestamps, and server logs.
• ●Authentication cookies and similar technology required to sign into and operate the client portal.
• ●Website traffic and usage information such as pages visited, approximate location, device and browser type, and referring site, collected through Google Analytics only if you accept analytics cookies through the cookie banner shown on your first visit.

Where Information Comes From

• ●Directly from you when you submit a form, communicate with us, schedule a meeting, or use the portal.
• ●Automatically from your browser or device when needed to deliver, secure, and troubleshoot the site.
• ●From service providers that help us operate the site, communicate with you, authenticate users, or manage client relationships.

How We Use Information

• ●Respond to inquiries, prepare and deliver requested audits, and schedule or provide services.
• ●Create and manage sales leads, client relationships, portal accounts, files, and project communications.
• ●Record and honor your communication choices.
• ●Operate, secure, troubleshoot, and improve the website, forms, and portal.
• ●Detect abuse, enforce our terms, comply with law, and protect Lumen Advisory, users, and others.
• ●Send marketing communications only through the optional choices described below.

Form Delivery And Recovery

Valid audit and contact submissions are first saved in a private Supabase delivery queue and then sent to GoHighLevel for lead and relationship management. If delivery to GoHighLevel succeeds, the full recovery copy is cleared from the queue while the delivery result and consent record remain.

If delivery fails, the submission may remain encrypted in the private queue so an authorized person can recover or resend it. Operational logs contain identifiers and delivery status, not the full form submission.

AI-Assisted Work

Lumen Advisory may use artificial intelligence tools to help organize, summarize, analyze, draft, or produce work. AI output can be incomplete or wrong and is reviewed within the scope of the service. Do not submit passwords, private keys, payment-card data, government identification numbers, medical records, or information you are not authorized to share.

Service Providers

We disclose information to providers only as reasonably needed for them to perform services for us. Current provider categories include:

• ●Vercel for website hosting, server functions, and operational logs.
• ●Google Analytics for website traffic and usage analytics.
• ●Supabase for the private form-delivery queue and related database services.
• ●GoHighLevel for contact, lead, opportunity, note, email, and text-message management.
• ●Clerk for client-portal authentication.
• ●Google Workspace and Google Drive for business communications and authorized portal file access.
• ●Artificial-intelligence providers used to assist with analysis, drafting, or service delivery.
• ●Professional advisers, authorities, or transaction participants when reasonably necessary for legal, security, or business-continuity purposes.

Sale, Sharing, And Targeted Advertising

Lumen Advisory does not sell personal information for money and does not share personal information for cross-context behavioral advertising. We do not currently use third-party advertising trackers or targeted-advertising technology on this site. If you accept analytics cookies through the site’s cookie banner, we use Google Analytics to understand site traffic and usage; it is configured for analytics purposes only, not for ad personalization or cross-context behavioral advertising, and it does not run until you accept it. You can change your choice at any time using the Cookie Preferences link in the site footer.

Service providers may process limited technical or submission information for the business purposes described in this policy. We do not authorize them to use form submissions to advertise unrelated products to you.

Email, Calls, And Text Messages

Submitting a contact or audit form allows Lumen Advisory to reply about that request. It does not require you to accept unrelated marketing.

If you separately choose email marketing, we may send occasional promotional email. You may unsubscribe through the message or by contacting us.

If you separately choose call and text marketing, you agree to recurring marketing calls and text messages at the number you provided, including messages sent using automated technology. Consent is not a condition of purchase. Message and data rates may apply and frequency varies. Reply STOP to a marketing text to opt out. You may also revoke either marketing choice by contacting us. We will retain a record of the request and your change.

California Notice

California residents may receive additional rights when a California privacy law applies to a business. The categories collected, sources, uses, and service-provider disclosures are described above. Lumen Advisory does not sell personal information or share it for cross-context behavioral advertising.

Depending on applicable law, rights may include access, correction, deletion, a portable copy, limits on certain sensitive-information uses, and freedom from discrimination for exercising a privacy right. We do not knowingly sell or share the personal information of consumers under 16.

State Privacy Rights

Depending on where you live and whether a state privacy law applies, you may have rights to know or access personal information, correct it, delete it, receive a portable copy, opt out of sale, targeted advertising, or certain profiling, limit certain sensitive-information uses, and appeal a denied request.

Even when a statutory threshold does not apply, you may ask Lumen Advisory to access, correct, or delete information associated with you. Send a request to audit@lumenadvisory.net or use the contact form. We may need to verify your identity. To appeal a decision, reply to the decision with the word “Appeal.” We will respond within the time required by applicable law.

Browser Privacy Signals

Some browsers offer Do Not Track settings, but there is no single accepted standard for responding to them. Because this site does not currently sell personal information or use it for targeted advertising, changing a Do Not Track setting does not change the site’s current behavior.

Where legally required, we honor recognized opt-out preference signals such as Global Privacy Control. Because we do not currently sell or share personal information for cross-context behavioral advertising, there is presently no sale or sharing to opt out of.

Retention

We keep information only as long as reasonably needed for the purposes described here, including delivering requested work, maintaining business and consent records, resolving disputes, enforcing agreements, meeting legal obligations, and preserving security records.

Retention varies by record type and provider. A successful form delivery clears the full recovery payload from the delivery queue, but contact information may remain in GoHighLevel and business systems while the relationship or a legitimate business, legal, or consent-record purpose continues. You may request deletion, subject to legal and operational exceptions.

Security

We use reasonable administrative and technical safeguards appropriate to a small digital-development business, including restricted credentials, private database access, platform security controls, and limited operational logging for form delivery. No internet transmission or storage system can be guaranteed completely secure.

Children

This site is intended for business users and is not directed to children under 18. We do not knowingly collect personal information from children through the public forms.

Changes And Contact

We may update this policy as the site, service providers, or legal requirements change. The date at the top shows the latest revision. Material changes may also be presented at the point of collection.

Questions and privacy requests may be sent to audit@lumenadvisory.net or through the website contact form. If that address changes, this policy will be updated.