Privacy Policy

Luminous Mind Academy ("LMA," "we," "us") operates luminousmind.academy and related services for families interested in after-school programs, 1-on-1 training, retreats, and parent learning experiences. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website, create an account, apply for programs, or communicate with us.

Our initial operational focus is the United States and Canada. Data may be processed in the United States where our service providers operate. This policy is provided for transparency and is not legal advice.

• Account information: name, email address, password (stored by Firebase Authentication), optional phone, referral source, and role.
• Student and child profiles: child or participant name, age, learning goals, zip code, county, address, delivery preferences, availability, and health or allergy notes when you provide them.
• Progress records: session-related notes, parent-submitted progress logs, instructor observations, and enrollment activity tied to your child's program participation.
• Parental billing: application and deposit status, tuition records, Stripe checkout session identifiers, and payment metadata (payment cards are processed by Stripe; we do not store full card numbers).
• Communications: messages you send through our site, support inquiries, and email correspondence.
• Technical data: IP address, browser type, device information, and analytics events if you opt in to cookies (see our Cookie Policy).
• Staff and instructor applications: professional background, location, and application materials you submit.

• Process applications, deposits, interviews, and enrollments.
• Operate and improve programs, assign instructors, track progress, and communicate about cohorts and schedules.
• Provide customer support and respond to inquiries.
• Maintain security, prevent fraud, and enforce our Terms and Conditions.
• Send service-related notices (e.g., application status, payment confirmations).
• With consent where required: optional analytics to understand site usage.
• Comply with legal obligations and protect our rights.

Luminous Mind Academy is primarily based in the United States. When we collect personal information about individuals in Canada, we follow applicable Canadian privacy law in addition to this Policy.

PIPEDA (federal): Canada's Personal Information Protection and Electronic Documents Act applies when we collect personal information in the course of commercial activities, including from families in provinces outside British Columbia and when information flows across provincial borders. We rely on meaningful consent, limit collection to what is reasonably needed, and maintain accountability for information under our control.

PIPA (British Columbia): When we collect personal information about British Columbia residents—including a minor's information provided by a parent or guardian—BC's Personal Information Protection Act applies to us as a private-sector organization. We apply comparable consent, safeguard, access, and correction practices.

Parental consent for minors: Our child programs are enrolled by parents or legal guardians. We collect a child's personal information only through a parent or guardian (during account signup, application, reservation, or enrollment), who confirms authority to provide that information. We record consent metadata when you submit child applications as described in our forms.

For U.S. users, if we collect personal information from children under 13 online, we do so in line with applicable law, including COPPA-oriented practices: limiting collection to what is needed, obtaining parental involvement, and honoring parental rights described below.

You may withdraw consent for optional analytics cookies at any time via our cookie banner or browser settings. Withdrawal does not affect the lawfulness of processing before withdrawal.

We share information with trusted processors who help us operate the site and programs. They may only use data as instructed by us:

We do not sell your personal information. We may disclose information if required by law, to protect safety, or in connection with a merger or acquisition with appropriate safeguards.

• Google Firebase (Authentication, Firestore database, Cloud Storage, and Analytics if you opt in).
• Stripe, Inc. (payment processing).
• Google Maps / Places (location autocomplete on application forms).
• Embedded content providers (e.g., YouTube for videos on our site may collect data under their own policies).

Our child programs are designed for ages 6–12 and are enrolled by parents or guardians. We do not knowingly collect personal information directly from children under 13 without parental involvement appropriate to the activity.

Parents and guardians may review, correct, or request deletion of their child's information by contacting us. We may need to verify identity before fulfilling requests.

We retain information as long as needed to provide services, meet legal and accounting requirements, resolve disputes, and enforce agreements. Application, enrollment, and progress records may be kept for several years unless a shorter period is required by law or you request deletion subject to exceptions.

We use reasonable administrative, technical, and organizational measures to protect personal information, including role-based access for staff, authenticated accounts through Firebase, and encryption in transit (HTTPS/TLS) for data sent between your browser and our services.

Payment card data is handled by Stripe; LMA does not store full card numbers on our systems. Staff and contractors may access personal information only when needed for program operations, support, or security.

No method of transmission or storage is completely secure; we cannot guarantee absolute security. If we become aware of a breach of security safeguards involving personal information under our control, we will notify affected individuals and regulators as required by applicable law, including Canadian breach-notification requirements where they apply.

• Access, correction, or deletion: email privacy@luminousmind.academy with your request. We may ask you to verify your identity.
• Canada: residents may request access to, correction of, or deletion of personal information we hold about them or their enrolled child, subject to legal exceptions. You may contact the Office of the Privacy Commissioner of Canada with complaints about our handling of personal information under federal law. British Columbia residents may also contact the Office of the Information and Privacy Commissioner for BC regarding PIPA matters.
• Account data: you may update profile information when logged in.
• Marketing: we do not sell personal information. If we send promotional emails in the future, you may opt out via unsubscribe links.
• California residents: we do not sell or share personal information for cross-context behavioral advertising as defined under the CPRA. Contact us to exercise applicable rights.
• Cookie choices: manage analytics cookies via our Cookie Policy and site banner.

If you access our services from outside the United States or Canada, you understand that information may be transferred to and processed in the U.S. where our providers are located.

Canadian families should be aware that service providers such as Firebase and Stripe may process data in the United States. We use contractual and operational safeguards appropriate to the nature of the information and require processors to use data only to provide services to us.

We may update this Privacy Policy from time to time. We will post the revised policy with an updated date. Material changes may be communicated through the site or email where appropriate.

Privacy questions and requests: privacy@luminousmind.academy

Luminous Mind Academy — Privacy inquiries