Privacy Policy

Last updated: 16 July 2026

LumiHQ (“we”, “us”) provides client galleries, print sales and studio management software for photographers. This policy explains what personal information we collect, how we use it, and the choices you have. We handle personal information in accordance with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).

Who this policy covers

It covers three groups of people:

• Photographers — account holders who use LumiHQ to run their business.
• Photographers’ clients — people whose galleries, bookings, invoices, contracts and photos a photographer manages through LumiHQ.
• Visitors — people browsing this website, including anyone who joins our waitlist.

What we collect

• Account information — name, email address, business name, ABN and contact details you provide when signing up or configuring your studio.
• Client data entered by photographers — names, email addresses, phone numbers, booking details, contracts, questionnaire responses, invoices and message threads. The photographer controls this data; we store and process it to provide the service.
• Photos — images uploaded to galleries, including any metadata embedded in them (such as capture time and location, if present in the file).
• Payment information — handled by Stripe. We never store full card numbers; we keep records of transactions, invoices and payouts.
• Usage information — gallery views, downloads and favourites (used to provide analytics to the photographer), plus standard technical logs (IP address, browser type) for security and reliability.
• Waitlist and marketing — the email address you give us when joining the waitlist or opting into product updates.

How we use it

• To provide, secure and improve the service — hosting galleries, processing orders, sending the emails a photographer asks us to send (gallery delivery, invoices, booking reminders).
• To process payments and print orders through our payment and fulfilment partners.
• To respond to support requests.
• To send product updates you’ve opted into. Every marketing email includes an unsubscribe link; transactional emails (like an invoice) are sent regardless because the service requires them.

We do not sell personal information, and we do not use your photos or your clients’ data for advertising.

Third-party services

We rely on a small set of processors to run LumiHQ: cloud hosting and storage providers, our database provider, Stripe (payments), our email delivery provider, SMS delivery (where a photographer enables reminders) and print fulfilment labs (only the details needed to produce and ship an order — typically the recipient’s name, shipping address and the ordered image). Each receives only what it needs to perform its function. Some of these providers store data outside Australia; where that happens, we take reasonable steps to ensure they handle it consistently with the APPs.

Security and retention

Data is encrypted in transit, access to production systems is restricted, and we keep encrypted backups with a separate provider. We retain your data while your account is active. If you close your account, we delete or de-identify personal information within a reasonable period, except where we must keep records (for example, tax and transaction records) to meet legal obligations.

Access, correction and deletion

You can access and update most of your information directly in your dashboard. For anything else — including a copy of your data or a deletion request — contact us and we’ll respond within a reasonable time. If you are a photographer’s client, the photographer controls your data; contact them first, and we’ll support their request.

Cookies

We use cookies that are necessary to sign you in and keep your session secure. Where we use analytics on this website, we prefer privacy-respecting tools and do not build advertising profiles.

Complaints and contact

If you have a question or believe we’ve mishandled your information, contact us and we’ll look into it promptly. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We’ll update this policy as the product evolves and note the date of the latest change at the top of this page.