Privacy policy

Who is responsible

Personal data handled through lumoriaon.com is controlled by Main and Local Gifts Inc., 5333 Casgrain Ave, Suite 501, Montreal, QC H2T 1X3, Canada. Address every privacy question to privacy@lumoriaon.com.

What gets recorded

• Browser-supplied details: the IP address, the user agent string (which reveals browser and device type), the referring page and a timestamp.
• A rough geolocation worked out from that IP, accurate to a city or region and nothing finer.
• Cookie identifiers, limited to the categories you switch on.
• Whatever you choose to write to us, by form or email: name, email address, subject line and message.

Purposes

• Serving pages and protecting the site (necessary).
• Aggregate analytics showing which notes get read (only with consent).
• Marketing measurement, so partner networks can credit a booking to one of our links (only with consent).
• Answering correspondence.

For readers covered by the GDPR, consent is the basis for analytics and affiliate cookies; legitimate interest covers security and routine running of the site; and replying to you rests on the request you made.

Recipients

Hosting and measurement suppliers receive the technical data they need. Partner networks hear about a click solely when you have enabled advertising cookies before departing through a referral link. Hotel websites reached from here follow their own privacy rules. A supplier may handle data in another country; when the law asks for it, we put contractual protections such as the EU standard clauses in place. Personal information is never sold.

Retention

Server access logs are purged after a maximum of 90 days. Aggregated analytics reports go after 26 months. Correspondence: erased 24 months after the final message in a thread. The cookie decision is stored locally on your device and disappears when you wipe site data.

Canada: PIPEDA

Canadian readers can ask to see the personal information on file about them, have mistakes fixed and pull back consent whenever they like. If our response falls short, the federal Privacy Commissioner accepts complaints. Start with privacy@lumoriaon.com.

GDPR (EEA and United Kingdom)

People located in those regions hold rights of access, correction, erasure, restriction, portability and objection, and can withdraw consent whenever they wish; processing done properly before then remains valid. Unresolved concerns may be taken to the national data-protection regulator where you live.

California: CCPA/CPRA

Residents of California can request the categories and pieces of personal information we gather and disclose, have records erased or amended, and forbid any sale of that information, or its transfer to ad networks that profile people across unrelated sites. Lumoriaon.com reads a browser GPC flag as exactly that refusal, and affiliate cookies then never load. Exercising them earns no penalty: pages, speed and content stay identical for you.

Children

This index is written for adults. Data from anyone younger than 18, or below the age of majority in their province or territory, is not knowingly gathered. Should a child have contacted lumoriaon.com, a quick note lets us erase the message.

Revisions

Edits to this notice bring a new revision date at the top. Larger changes will also be flagged on the front page for some weeks.