Privacy Policy
Effective date: October 9, 2026
This policy explains how Lumini, LLC (“CarbonSig”, “we”, “us”) handles personal data when you visit carbonsig.com (the “website”), contact us through it, or sign up for our newsletter. It applies worldwide. It covers the website only.
Who we are
Lumini, LLC operates CarbonSig and is responsible for your personal data (the “controller”, under EU and UK law).
Lumini, LLC320 Post Road, Suite 150
Darien, CT 06820
United States
Privacy questions and requests: sales@carbonsig.com
What we collect, and why
When you visit the website
- Technical data. Our hosting and security providers process your IP address, browser type and the page you request, which is how websites work. It lets us deliver the page and protect it against abuse. We don’t use it to identify you.
- No analytics or advertising tracking. The website runs no analytics, advertising or social media trackers. It sets only the strictly necessary cookies listed in our Cookie Policy.
When you contact us
The contact form asks for:
- your name, work email and company (required);
- optionally, your role, industry, what’s driving your enquiry, your timeline, your area of interest and a message.
We also record:
- the page you sent the form from;
- any campaign tags in the link you followed (for example “utm_source”);
- the time of sending.
We use this to reply to your enquiry and to prepare a conversation about our services.
- Legal basis (EU/UK): our legitimate interest in responding to business enquiries, and taking steps at your request before a possible contract.
- Spam protection. Before a submission is accepted, Cloudflare Turnstile checks that it comes from a person. This uses your IP address and browser signals. Submissions are also checked automatically for spam. Suspected spam is kept aside and not acted on. This check has no effect on you other than whether we see your message.
When you sign up for the newsletter
If you tick the newsletter box, we send your email address to our newsletter provider, beehiiv, to add you to the list. You can unsubscribe at any time with the link in every email.
- Legal basis (EU/UK): your consent.
Who receives your data
We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We use these service providers, who process data on our behalf and only for the purposes above:
| Provider | What for | Data |
|---|---|---|
| GoDaddy (Managed WordPress hosting, including its Cloudflare-based content delivery network) | hosting the website, delivering pages, sending form notifications by email | technical data; the contents of contact form submissions |
| Cloudflare | bot protection on all pages and the “I’m human” check on the contact form | IP address, browser signals |
| beehiiv | newsletter | email address (only if you opt in) |
| Microsoft (Microsoft 365 email, provided through GoDaddy) and Proofpoint (email security filtering) | receiving and answering enquiries | contents of contact form submissions and emails you send us |
We may also disclose data when the law requires it, to protect our rights, or as part of a merger or sale of the business.
International transfers
We are based in the United States, and our providers may process data in the US and elsewhere. When personal data from the EU, UK or Switzerland is transferred, we rely on the safeguards set out in our providers’ data processing terms, such as the European Commission’s standard contractual clauses.
How long we keep it
| Data | Kept for |
|---|---|
| Contact form enquiries | 24 months after you send them, then deleted. If you become a customer, the relevant details move to our customer records. |
| Submissions identified as spam | 90 days |
| Copies of form notification emails on the website | 90 days |
| Newsletter subscription | until you unsubscribe |
Messages in our sales mailbox are kept as long as they’re needed to handle your enquiry and any business that follows.
Your rights
Wherever you live, you can ask us to:
- give you access to, or a copy of, your personal data;
- correct it;
- delete it;
- restrict or object to how we use it;
- move it to another provider (portability).
Where we rely on consent, for example for the newsletter, you can withdraw it at any time.
We honour these requests from everyone, and we will never treat you differently for making one. We don’t sell personal data or share it for targeted advertising, so there is nothing to opt out of.
To make a request, email sales@carbonsig.com. We may need to confirm your identity first. We reply within one month.
If you’re in the EU or UK, you can also complain to your local data protection authority. In the UK that’s the Information Commissioner’s Office (ICO).
Security
We protect personal data with appropriate technical and organisational measures:
- encrypted connections (HTTPS);
- access limited to the people who need it;
- spam and abuse protection.
No system is completely secure, but we work to keep risks low.
Children
Our website is for businesses and are not directed at anyone under 18. We don’t knowingly collect children’s data. If you believe we have, contact us and we’ll delete it.
Changes to this policy
We’ll post any changes on this page and update the effective date. If a change is significant, we’ll make that clear on the website.
Contact
Lumini, LLC, 320 Post Road, Suite 150, Darien, CT 06820, United States
sales@carbonsig.com