LUMA.

Privacy notice

Luma Analytics (Pty) Ltd trading as Luma Automations. Version 1.1, 26 September 2026.

This notice says what personal information Luma Automations collects, why, and what you can do about it. The legal entity is Luma Analytics (Pty) Ltd. It is written to be read, not filed. If anything in it is unclear, write to the address at the end and you will get an answer from a person.

Who we are

CompanyLuma Analytics (Pty) Ltd, registration number 2026/428485/07, trading as Luma Automations
AddressBallito, KwaZulu-Natal, South Africa (online business; contact via email or WhatsApp below)
Websiteaskluma.co.za
Information OfficerTerence Swart, [email protected], 083 436 9104

This website

This website collects nothing. It has no contact form, sets no cookies, and runs no analytics or tracking. The typefaces are loaded from Google Fonts, which means your browser requests two font files from Google when the page opens; that request carries your IP address, as any web request does, and nothing else. If you would rather it did not, your browser will fall back to a system typeface if you block that domain.

When you email or WhatsApp us from a link on the site, you are using your own email or WhatsApp account and their terms apply to that message in transit. What you send us is then held as described below.

What we hold, and why

EnquiriesYour name, contact details and what you wrote, from an email or WhatsApp message you sent us. Held so we can reply and, if you become a client, so we can do the work. Kept for as long as the conversation or the engagement is live, and for three years after for our own records, then deleted.
ClientsBusiness contact details, the agreement between us, invoices and payment records. Held to perform the contract and because tax law requires invoices to be kept for five years.
Client staff who use a tool we hostWork email addresses on an access list, and a record of sign-in events. Held so that only the people the client has named can sign in. Removed on the client's instruction or when the engagement ends.

We do not buy, sell or rent personal information, and we do not use it for marketing you did not ask for.

Documents our clients process through tools we build

Some clients use software we host to process their own documents, which can contain personal information about their customers. For that processing Luma Analytics (Pty) Ltd is an operator under the Protection of Personal Information Act: we act only on the client's instruction, under a written agreement with them, and the client remains responsible for the information and for answering its own customers about it. Our tools are built so that we keep no copy of any such document: it is processed and discarded. If you are a customer of one of our clients and want to know what is held about you, please ask that client; we will help them answer you.

Who else sees it

Email and calendar for the company run on ordinary hosted services, and code and business records are kept on GitHub. Where a client's tool sends documents to a third party for processing, that party is named in the client's agreement with us and is bound by its own data processing terms. Some of these providers are outside South Africa, chiefly in the United States. Section 72 of the Act allows that where the recipient is bound by terms that give substantially similar protection, and each of ours is. We do not send personal information anywhere else.

Your rights

To exercise any of these, email the Information Officer. We will respond within a reasonable time and in any event within 30 days. The Promotion of Access to Information Act manual, which sets out the formal request procedure, is at /paia.

Changes

If this notice changes, the version and date at the top change with it, and the previous version is kept in our records.