Lumen Resources (“Lumen”, “we”, “us” or “our”) is committed to protecting your privacy and handling personal information responsibly.
This Privacy Policy explains how we collect, use, store and share personal information when you visit the Lumen website, create an account, purchase a subscription, contact us or otherwise use our services.
For the purposes of this Privacy Policy, “Services” means the Lumen website and the educational resources, subscriptions, communications and other services made available through it.
We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
This Privacy Policy applies to individuals whose personal information we process in connection with Lumen, including:
visitors to our website;
teachers and other school staff;
individuals who create or manage Lumen accounts;
individuals who purchase subscriptions on behalf of schools or organisations;
people who contact us with enquiries or requests; and
individuals who choose to receive communications from Lumen.
Lumen is primarily a service for schools and educational professionals.
Pupils do not need to create individual Lumen accounts or provide personal information directly to Lumen in order to take part in lessons or activities using Lumen resources.
The personal information we collect will depend on how you interact with Lumen.
We may collect information including:
your name;
your email address;
your school or organisation;
your job role, where provided;
your billing address;
your school location or country;
information relating to the size or subscription category of your school;
account and login information;
details of subscriptions or purchases;
correspondence you send to us;
information you provide when requesting support; and
marketing preferences.
Payments may be processed by third-party payment providers.
Lumen does not normally receive or store full payment card details. Payment providers may process information such as your card details, billing information and transaction information in accordance with their own privacy policies.
We may receive limited payment-related information such as:
confirmation that a payment has been made;
the amount paid;
the date of payment;
the subscription purchased;
transaction identifiers; and
billing or payment status.
When you visit or use the website, certain technical information may be collected automatically by Lumen or by service providers used to operate the website.
This may include:
IP address;
browser type;
device information;
operating system;
pages visited;
date and time of access;
referring website;
interactions with pages or features;
login activity; and
cookie or similar technology information.
We may collect personal information:
directly from you when you create an account;
when you purchase or manage a subscription;
when you contact us;
when you subscribe to email communications;
automatically when you use the website;
through the services and technology providers we use to operate Lumen; and
from a school or organisation where it provides information necessary to establish or administer its subscription.
We may use personal information to:
create and administer Lumen accounts;
provide access to subscribed resources and Services;
process and manage subscriptions;
process or verify payments;
communicate about purchases and subscriptions;
respond to enquiries and provide customer support;
maintain the security of accounts and the website;
identify and prevent unauthorised use or misuse;
improve the website, Services and user experience;
understand how the website and resources are used;
maintain business and financial records;
comply with legal, regulatory and tax obligations;
enforce our Terms of Service;
send service-related announcements and important updates; and
send marketing communications where permitted by law.
Under UK data protection law, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on the following lawful bases.
We may process personal information where it is necessary to enter into or perform a contract with you, including to:
create and administer an account;
provide a purchased subscription;
provide access to Lumen resources;
process payments; and
provide customer support relating to the Services.
We may process personal information where this is necessary for our legitimate business interests and those interests are not overridden by your rights and interests.
These interests may include:
operating and improving Lumen;
maintaining website and account security;
preventing fraud and unauthorised account sharing;
communicating with existing subscribers about the Services;
understanding how the Services are used; and
protecting Lumen's intellectual property and contractual rights.
We may process personal information where necessary to comply with a legal obligation, including accounting, tax, regulatory and legal requirements.
Where required, we may rely on your consent.
For example, consent may be used for certain marketing communications or for the use of non-essential cookies and similar technologies.
Where processing is based on consent, you may withdraw that consent at any time.
We may send you information about Lumen resources, new content, offers, updates or other relevant services where we are permitted to do so.
Where consent is required, we will obtain it before sending marketing communications.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the email or by contacting us.
Unsubscribing from marketing communications will not prevent us from sending essential service communications relating to your account, subscription, payment or changes to the Services.
The Lumen website may use cookies and similar technologies to operate the website, remember preferences, maintain account security, understand website usage and, where applicable, support marketing activities.
Some cookies are necessary for the website to function and may be used without consent where permitted by law.
Non-essential cookies, including certain analytics or advertising cookies, will only be used where the required consent has been obtained.
You can manage available cookie choices through the cookie controls provided on the website and through your browser settings.
Disabling certain cookies may affect the way some parts of the website function.
The ICO states that users must generally be informed about cookies and give active consent for non-essential cookies, while strictly necessary cookies may be exempt from consent requirements.
We do not sell personal information.
We may share personal information with trusted third-party service providers where necessary to operate Lumen.
These providers may include organisations that provide:
website hosting;
subscription and account management;
payment processing;
email delivery;
customer support;
website analytics;
security and fraud prevention;
data storage; and
other technical or professional services.
These providers may only use personal information for the purposes for which it has been provided to them, subject to their own legal obligations and our contractual arrangements where applicable.
We may also disclose personal information where necessary:
to comply with a legal obligation;
in response to a valid request from a court, regulator or law-enforcement authority;
to establish, exercise or defend legal rights;
to investigate fraud, security incidents or breaches of our Terms of Service; or
as part of a sale, transfer or restructuring of Lumen or substantially all of its business assets.
Lumen uses third-party services to operate parts of the website and subscription service.
This may include Podia, which provides website, account, subscription or digital-content functionality, and payment providers used to process transactions.
Where these providers process personal information, their own privacy policies may also apply.
Some service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take reasonable steps to ensure that appropriate safeguards required by applicable data protection law are in place.
Some of the service providers used by Lumen may operate from, or store information in, countries outside the United Kingdom.
Data protection laws in those countries may differ from UK law.
Where personal information is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable data protection legislation and that an appropriate safeguard is used where required.
Such safeguards may include:
a finding that the destination provides an adequate level of protection;
approved contractual protections; or
another lawful transfer mechanism permitted under UK data protection law.
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, tax and contractual obligations.
The length of time information is retained may depend on the type of information and our reason for processing it.
For example:
account information may be retained while an account remains active;
subscription information may be retained while the subscription is active and for an appropriate period afterwards;
financial and transaction records may be retained for the period required by tax and accounting law;
correspondence may be retained where necessary to resolve enquiries or maintain appropriate business records; and
marketing information may be retained until you unsubscribe or object to the relevant processing.
Where personal information is no longer required, we will delete it, anonymise it or otherwise dispose of it securely where reasonably practicable.
We take reasonable technical and organisational measures to protect personal information against accidental or unlawful loss, misuse, alteration, disclosure or unauthorised access.
These measures may include appropriate account-security controls, secure third-party service providers and limiting access to personal information where appropriate.
No internet-based service can guarantee absolute security.
Users are responsible for maintaining the confidentiality of their Lumen login credentials and should notify us if they believe their account has been compromised.
Lumen is designed primarily for use by teachers, schools and educational professionals.
Pupils may use Lumen educational resources as part of activities organised by their school, but pupils do not need to create individual Lumen accounts or provide personal information directly to Lumen.
We do not knowingly seek to collect personal information directly from children through subscriber accounts.
If we become aware that personal information relating to a child has been provided to us unnecessarily or without an appropriate lawful basis, we will take appropriate steps to address the situation, which may include deleting the information.
If you believe that a child has provided personal information directly to Lumen, please contact us.
Depending on the circumstances, UK data protection law may give you rights relating to your personal information.
These may include the right to:
Access – request a copy of personal information we hold about you;
Rectification – ask us to correct inaccurate or incomplete information;
Erasure – ask us to delete personal information in certain circumstances;
Restriction – ask us to restrict the way we use your information in certain circumstances;
Object – object to certain processing, including direct marketing;
Data portability – receive certain information in a structured, commonly used and machine-readable format where applicable; and
Withdraw consent – withdraw consent at any time where we rely on consent as our lawful basis.
These rights do not apply in every circumstance and may be subject to exemptions under applicable law.
To exercise any of these rights, please contact us using the details below.
The ICO confirms that a privacy notice should explain people's information rights and how they can raise concerns about the processing of their information.
If you have a concern about how Lumen has handled your personal information, please contact us first so that we have an opportunity to address the issue.
You also have the right to raise a concern with the UK supervisory authority for data protection:
Information Commissioner's Office (ICO)
Further information about data protection rights and complaints is available from the ICO.
The Lumen website may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices of websites or services that we do not control.
We recommend reviewing the privacy policy of any third-party service before providing personal information to it.
We may update this Privacy Policy from time to time to reflect changes to:
the Services;
the technology or providers we use;
our business practices; or
applicable legal or regulatory requirements.
The latest version will be published on the Lumen website with an updated revision date.
Where a change materially affects how we use personal information, we will take reasonable steps to notify affected users where appropriate.
The ICO recommends that organisations review their privacy information regularly and keep it up to date.
If you have questions about this Privacy Policy, wish to exercise a data protection right, or have concerns about how your personal information is handled, please contact:
Lumen Resources
Email: info@lumen-resources.com
Website: www.lumen-resources.com