← Back to Lumina

Privacy Notice

Last updated: 6 September 2026

1. Who we are

R.H.Consult., trading as Lumina, provides the cycle-smart nutrition service at womennourishment.com. For the personal data described here, R.H.Consult. acts as the data controller: we decide what data is collected and why. Questions, requests or complaints: hrally@yahoo.com.

2. What we collect and why

  • Identity and contact data (name, email address) — to create your account, start your trial, send your plan or guide, and reply to you. Legal basis: performance of our contract with you; consent where you opt in to email.
  • Account credentials (email and a hashed password) — to secure sign-in. Legal basis: contract.
  • Cycle and wellbeing details you enter (cycle start date, period and cycle length, medication or supplement names you choose to type) — to generate phase-matched guidance. Some of this is health-related data, so we rely on your explicit consent, which you give by entering it and can withdraw at any time. Medication names you enter on the medications page stay in your browser unless you submit them to us.
  • Technical and usage data (IP address, approximate city-level location derived from it, timezone, browser/device information, pages and actions) — for security, fraud prevention, troubleshooting and improving the product. Legal basis: legitimate interests.
  • Support and suggestion messages — to answer you and improve Lumina. Legal basis: legitimate interests and, where you supply contact details, contract.
  • Research with AI/LLM models — we may use de-identified content you submit to evaluate and improve AI-assisted nutrition guidance. Legal basis: consent.

Payment card details are collected and processed by Paddle, not by us. We never see or store full card numbers.

3. Who we share data with

  • Merchant of Record — Paddle.com: our online reseller and Merchant of Record for all orders. Paddle handles checkout, subscription management, payments, tax compliance, invoicing, customer payment queries and refunds, and receives the data needed for those purposes.
  • Service providers / subprocessors: hosting and database, email delivery, error monitoring and AI model providers, acting on our instructions.
  • Professional advisers: legal and accounting, where necessary.
  • Authorities: where required by law or to protect legal rights.

We do not sell your personal data.

4. International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. How long we keep data

  • Account and cycle data: while your account is active, then up to 12 months.
  • Signup and trial records: up to 24 months from your last interaction.
  • Support and suggestion messages: up to 24 months.
  • Technical logs: normally up to 12 months.
  • Billing and tax records: retained by Paddle and by us for the period required by tax law (commonly 6–10 years).

When data is no longer needed we delete or anonymise it.

6. Your rights

Depending on where you live, you may ask us to: access a copy of your data; correct inaccurate data; delete it; restrict or object to processing; receive it in a portable format; or withdraw consent (including for AI research or marketing email) at any time. Email hrally@yahoo.com and we will respond within one month. UK/EEA users may also complain to their local data protection supervisory authority.

7. Security

We apply appropriate technical and organisational measures: encryption in transit (HTTPS) and at rest, hashed passwords, row-level access rules in our database, role-restricted admin access, and least-privilege credentials for our providers. No system is perfectly secure, but we review these measures regularly.

8. Cookies and similar technologies

We use essential cookies and local storage to keep you signed in and to run checkout. We may also use analytics cookies to understand how pages are used and advertising cookies, which means ads related to your browsing habits may be shown to you. You can manage or delete cookies in your browser settings, and browser-level tracking controls will limit non-essential cookies.

9. Children

Lumina is not intended for children under 16, and we do not knowingly collect their data.

10. Changes

We will post updates on this page with a new “last updated” date and notify you of material changes where appropriate.

Home