Privacy Policy

1. Who we are

Luminous is an initiative focused on self-development and well-being, and a trade name of Beemsterboer NZ Beheer B.V. (Chamber of Commerce / KvK 83222537, de Veken 226b, 1716 KJ Opmeer). That entity is also the controller within the meaning of the General Data Protection Regulation (GDPR / AVG). For privacy matters, contact: privacy@lu-minous.app.

2. What data we collect

Depending on what you do with us, we collect:

• When you enroll in a course: name, email address, and an optional message. We also record that you agreed to the terms and to immediate delivery.
• When you pay: payment is handled through Mollie. We receive from Mollie a payment status and a reference. We ourselves store no card or bank account details.
• In some programs with a personal intake, additional data may be requested; we process those only with your knowledge and solely for that program.
• When accessing course material: one technical token in a secure cookie, solely to remember your access. No tracking.
• Course progress (which lessons you have completed) is stored only locally in your own browser. This data does not reach us.

3. What we use it for

• To process your enrollment and grant you access
• To handle payment
• To stay in touch with you about your course
• To fulfill accounting and tax obligations

We do not use your data for marketing profiling, we do not sell it, and we do not link it to other services without your explicit consent.

4. How long we retain it

• Enrollments and administration: 7 years (tax retention required for financial records).
• Access tokens: for as long as your access to the course you purchased remains (ongoing), or until you actively have them revoked.
• Local progress: remains in your browser until you clear it yourself; we store none of it.

5. Who we share it with

We share your data only with the following parties, and only where necessary (processors within the EU/EEA or with appropriate safeguards):

• Hosting provider (Hetzner, Germany). To make the site technically available.
• Mollie (Netherlands). To process payments securely.
• Our email service (Hostnet, Netherlands). To send confirmation and access emails.
• Our accountant and the Dutch Tax Authority (Belastingdienst). For legally required processing of invoices.

6. Your rights

You have the right to:

• Request access to the data we hold about you
• Request correction of inaccurate data
• Request deletion (unless a statutory retention period applies)
• Withdraw your consent at any time
• Lodge a complaint with the Dutch Data Protection Authority / Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl)

For any of these rights: send an email to privacy@lu-minous.app. We respond within 30 days.

7. Security

We take security seriously. Concrete measures:

• Data stored in European data centers (Hetzner, Germany)
• HTTPS for all web transactions
• Session tokens with limited validity
• No password storage — passwordless magic-link system
• Minimal data collection (only what is strictly necessary)

8. Cookies and local storage

We use one functional cookie: cursus_token. It remembers that you have access to your course material. No tracking cookies, no marketing cookies, no third-party cookies.

In addition, the course stores your progress (which lessons you have completed) in the local storage of your own browser. That information stays on your device and is not sent to us. You can clear it at any time via your browser settings.

9. Changes

We reserve the right to amend this policy. In the event of substantial changes, we will inform active participants by email. The date at the top of this page indicates the latest version.

Questions? Email privacy@lu-minous.app or use the contact page.