Legal

Privacy Policy

Last updated: 12 March 2026

1. Introduction

Lumina Ventures Pty Ltd (ABN to be confirmed) ("we", "us", "our") is committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, use, store, and disclose personal information through our website at luminaventures.com.au and related services.

By using our website or submitting information through our forms, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We may collect the following categories of personal information:

2.1 Information you provide directly

  • Contact form submissions: Name, email address, phone number (optional), enquiry type, and message content.
  • Business Indicative Appraisal tool: Name, email address, phone number (optional), industry sector, business location (region), approximate annual revenue, approximate EBITDA, and responses to operational assessment questions.

2.2 Information collected automatically

  • Analytics data: Pages visited, time on site, referral source, browser type, device type, and general geographic location (city-level). This data is collected via Google Analytics 4 and Vercel Analytics and is aggregated — it does not identify you personally.
  • Technical data: IP address (used for rate limiting and fraud prevention, not for marketing), cookies, and similar technologies as described in Section 8.

3. How We Use Your Information

We use personal information for the following purposes:

  • To respond to your enquiries submitted through the contact form.
  • To deliver your personalised Indicative Appraisal results and Exit-Readiness score.
  • To contact you about our acquisition services or Pre-Exit Audit services, where you have given consent.
  • To improve our website and services based on aggregated, de-identified usage patterns.
  • To protect against fraud, spam, and abuse (e.g. reCAPTCHA verification, rate limiting).

We will not use your information for any purpose other than those described above without obtaining your further consent.

4. Legal Basis for Collection

We collect and process your personal information on the following lawful bases under the Australian Privacy Principles:

  • Consent: Where you explicitly consent to us collecting and using your information (e.g. by ticking the consent checkbox on our Indicative Appraisal tool or by voluntarily submitting a contact form).
  • Legitimate interest: Where reasonably necessary for our business functions (e.g. website security, fraud prevention, service improvement).

5. Disclosure to Third Parties

We do not sell, rent, or trade your personal information to third parties.

We may share your information with the following categories of service providers, solely for the purposes of operating our website and services:

  • Resend (email delivery) — to send notification emails when you submit a form. Resend processes your name and email address for delivery purposes only.
  • Google Firebase / Firestore (data storage) — to securely store your form submissions. Data is stored in Google Cloud infrastructure.
  • Vercel (website hosting) — our website is hosted on Vercel's infrastructure. Vercel may process technical data (IP addresses, request logs) as part of hosting operations.
  • Google (analytics and spam prevention) — Google Analytics 4 collects aggregated website usage data. Google reCAPTCHA v3 processes interaction data to prevent spam submissions.

All third-party providers are bound by their own privacy policies and data processing agreements. We select providers that maintain appropriate security standards.

6. Data Storage and Security

Your personal information is stored securely using industry-standard measures, including:

  • Encrypted transmission (HTTPS/TLS) for all data in transit.
  • Server-side processing — sensitive operations (database writes, email sending) are performed server-side, not in the browser.
  • Firebase Admin SDK with service account authentication — your data is not accessible from client-side code.
  • Rate limiting and bot protection on all form submission endpoints.

Data may be stored on servers located in Australia, the United States, or other jurisdictions where our service providers operate. Where data is transferred outside Australia, we ensure appropriate safeguards are in place consistent with APP 8 (cross-border disclosure).

7. Data Retention

We retain your personal information only for as long as reasonably necessary for the purposes described in this policy. Specifically:

  • Contact form submissions: Retained for up to 24 months, then deleted unless an ongoing business relationship exists.
  • Appraisal submissions: Retained for up to 24 months, then deleted unless an ongoing business relationship exists.
  • Analytics data: Retained in accordance with Google Analytics and Vercel Analytics default retention periods (typically 14 months).

You may request deletion of your data at any time (see Section 9).

8. Cookies and Tracking Technologies

Our website uses the following cookies and tracking technologies:

  • Essential cookies: Required for basic website functionality (e.g. theme preference via next-themes). These do not collect personal information.
  • Google Analytics 4: Uses cookies to collect aggregated website usage data. IP addresses are anonymised. You can opt out using the Google Analytics Opt-out Browser Add-on.
  • Google reCAPTCHA v3: Uses cookies and browser signals to distinguish human users from bots. Subject to Google's Privacy Policy and Terms of Service.

9. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of any inaccurate or incomplete information.
  • Request deletion of your personal information (subject to any legal obligations requiring us to retain it).
  • Withdraw consent at any time for future processing. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
  • Complain to the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.

To exercise any of these rights, contact us at sandi@luminaventures.com.au. We will respond within 30 days.

10. Business Indicative Appraisal Tool — Additional Disclosures

Our Business Indicative Appraisal tool provides estimates based on user-provided data and publicly available industry multiples. The following additional disclosures apply:

  • The tool does not provide financial advice, a formal business valuation, or a recommendation to buy or sell a business.
  • Lumina Ventures Pty Ltd does not hold an Australian Financial Services Licence (AFSL).
  • Results are indicative estimates presented as ranges, not fixed figures. They should not be relied upon for financial decision-making.
  • Users should seek independent professional advice (from a licensed business valuator, accountant, or financial adviser) before making any decisions based on the information provided.
  • The financial data you enter (revenue, EBITDA) is used solely to calculate your indicative results and to allow us to assess whether your business may be a fit for our acquisition criteria. It is not shared with third parties.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. Material changes that affect how we handle your personal information will be communicated via a notice on our website.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have a privacy-related complaint, please contact us: