Privacy Policy

This privacy notice for CareerLumi ("we", "us", or "our") describes how and why we collect, store, use, and share your personal information when you use our services, including visiting our website, registering as a member or coach, purchasing digital products, and booking coaching sessions. By using our services, you acknowledge this notice.

Questions or concerns? Contact us at [email protected].

Table of Contents

1. Who We Are
2. Information We Collect
3. How We Collect Your Data
4. How We Use Your Data
5. Legal Bases for Processing
6. Sharing Your Data
7. Third-Party Websites and Services
8. Cookies and Tracking Technologies
9. Social Logins
10. AI-Powered Features
11. Payments, Escrow, and Digital Products
12. Data Retention
13. Data Security
14. Children
15. Your Privacy Rights
16. Updates to This Policy
17. Contact Us

1. Who We Are

CareerLumi is a community-driven coaching platform connecting global professionals with culturally aware coaches. We operate under the trading name "CareerLumi" and are based in England, UK. As the data controller, we are responsible for the personal information you share with us through our website and platform.

Coaches on our platform are independent contractors, not employees of CareerLumi. Where coaches process member data as part of delivering their services, they do so in their capacity as independent service providers. CareerLumi facilitates the relationship and applies platform-level data protections throughout.

2. Information We Collect

Information you provide to us

We collect personal information you voluntarily provide when you sign up, create an account, book a session, purchase a digital product, or contact us. This may include:

• Full name and email address
• LinkedIn profile URL
• Current role, years of experience, and coaching focus (coaches)
• Career stage and goals (members)
• Billing address and payment details (processed securely via Stripe or Shopify)
• Government-issued identity documents submitted as part of the coach verification process (collected and processed by Stripe Identity on our behalf)
• Session notes and AI-generated summaries (where applicable)
• Messages sent through our platform or directly to us

Information collected automatically

When you visit our website, we automatically collect certain technical data, including your IP address, browser type, device characteristics, operating system, pages viewed, and how you interact with our site. This data does not identify you directly but helps us maintain security, analyse usage, and improve our services.

3. How We Collect Your Data

We collect data through the following channels:

• Pre-launch sign-up forms (via Google Forms)
• Account registration on our platform
• Google Analytics (website usage data)
• Social login providers (Google, LinkedIn)
• Stripe (coaching session payment processing, escrow, and coach identity verification via Stripe Identity)
• Shopify (digital product purchases)
• Email marketing tools (such as Loops, Mailchimp, or equivalent)
• Video calling platforms used for coaching sessions (such as Zoom, Google Meet, or equivalent)
• AI tools used to generate session summaries
• Direct communications by email or in-platform messaging

4. How We Use Your Data

We use your personal data to:

• Manage your registration and onboarding as a coach or member
• Facilitate coach-member matching and session bookings
• Process payments and manage escrow for coaching sessions
• Fulfil orders for digital products
• Generate AI-assisted session summaries (where applicable and consented to)
• Send service-related communications, booking confirmations, and platform updates
• Send marketing communications (only where you have opted in)
• Improve and personalise the CareerLumi experience
• Detect and prevent fraud or misuse of our platform
• Comply with our legal obligations

5. Legal Bases for Processing

Under UK GDPR and GDPR, we rely on the following legal bases:

• Consent - where you have opted in to marketing communications or AI-generated session summaries. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Contract performance - to deliver coaching sessions, process payments, and fulfil digital product orders.
• Legitimate interests - to operate and improve our platform, prevent fraud, and ensure platform security, where these interests are not overridden by your rights.
• Legal obligation - where we are required to retain or share data under applicable law.

6. Sharing Your Data

We do not sell your personal data. We may share your information with the following parties:

• Service providers - companies that help us operate our platform, including Stripe (payments, escrow, and coach identity verification), Shopify (digital products), Google (Analytics and Forms), email marketing providers, video calling platforms, and AI tools. All are bound by appropriate data processing agreements.
• Coaches - when you book a session, relevant profile information is shared with your coach to enable them to prepare and deliver their services. Coaches are independent contractors and handle this data in accordance with their own obligations under applicable law.
• Legal authorities - where required by law, court order, or to protect the rights and safety of CareerLumi, our users, or the public.
• Business transfers - in the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity subject to equivalent privacy protections.

We do not share your data with third parties for their own marketing purposes.

7. Third-Party Websites and Services

Our platform may contain links to third-party websites or services that we do not operate or control. We are not responsible for their privacy practices. We recommend reviewing the privacy policies of any third-party site before sharing personal information with them.

8. Cookies and Tracking Technologies

We use cookies and similar technologies (such as web beacons and pixels) to operate our website, analyse traffic, and improve your experience. The types we use include:

• Essential cookies - necessary for the website to function correctly
• Analytics cookies - to understand how visitors use our site (e.g. Google Analytics)
• Marketing cookies - to measure the effectiveness of our campaigns, where applicable

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our site. A full cookie notice will be published ahead of platform launch.

9. Social Logins

We may offer the option to register or log in using your Google or LinkedIn account. If you choose to do so, we will receive certain profile information from that provider, such as your name, email address, and profile picture. We use this information only as described in this policy. We do not control how those providers handle your data and recommend reviewing their respective privacy policies.

10. AI-Powered Features

CareerLumi uses AI tools to generate session summaries and support personalised coaching experiences. Where AI processing involves your personal data, we ensure appropriate safeguards are in place and will seek your consent where required by law. You may opt out of AI-generated session summaries at any time by contacting us at [email protected].

11. Payments, Escrow, and Digital Products

Coaching session payments are processed through a secure escrow system managed entirely by Stripe. Funds are held by Stripe and released to coaches following successful session completion. We do not store your full card details; all payment and escrow data is handled by Stripe in accordance with their privacy policy.

To join the CareerLumi platform, coaches are required to complete identity verification through Stripe Identity. This process collects government-issued identity documents on our behalf. CareerLumi does not store copies of these documents; they are processed and retained by Stripe in accordance with their privacy policy and applicable law. The legal basis for this processing is our legitimate interest in maintaining a safe and trustworthy platform.

Digital products (such as CV templates and career guides) are sold through our Shopify store. Shopify processes your order and payment data in accordance with their privacy policy .

12. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this policy, or as required by law. As a general guide:

• Pre-launch sign-up data is held until the platform launches or until you request deletion
• Account data is retained for the duration of your account plus up to six months after closure
• Payment and transaction records are retained for up to seven years to comply with financial and tax obligations
• Session summaries are retained for the period agreed with your coach, or until you request deletion

When we no longer need your data, we will securely delete or anonymise it. Where deletion is not immediately possible (for example, data held in backup archives), we will isolate it from further processing until it can be deleted.

13. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no method of transmission over the internet is entirely secure. You access our services at your own risk and should take care when sharing personal information online.

14. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children under 18. If we become aware that we have collected data from a child under 18 without appropriate parental consent, we will take steps to delete it promptly. If you believe we may have collected such data, please contact us at [email protected].

15. Your Privacy Rights

Under UK GDPR and GDPR, you have the right to:

• Access - request a copy of the personal data we hold about you
• Rectification - request correction of inaccurate or incomplete data
• Erasure - request deletion of your data, subject to legal retention obligations
• Restriction - request that we limit how we process your data in certain circumstances
• Portability - receive your data in a structured, machine-readable format
• Objection - object to processing carried out on the basis of legitimate interests
• Withdraw consent - at any time, where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within one month in accordance with applicable data protection law.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

16. Updates to This Policy

We may update this policy from time to time to reflect changes to our practices or applicable law. The "last updated" date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically. Continued use of our services after changes are published constitutes acceptance of the updated policy.

17. Contact Us

If you have any questions or concerns about this privacy policy or how we handle your data, please contact us:

• Email: [email protected]
• Address: CareerLumi, England, UK