Privacy Policy

Lumora is an online event ticketing and experience platform. For the purposes of data protection law, Lumora is the data controller of personal information collected through this Platform. You can contact us at hello@lumora.co.

• To create and manage your account.
• To process ticket purchases and installment payments.
• To send transactional emails — booking confirmations, receipts, and installment reminders.
• To facilitate ticket transfers and resale transactions.
• To respond to support requests.
• To detect and prevent fraud and abuse.
• To improve the Platform through analytics and user research.
• To send marketing communications where you have opted in (you may opt out at any time).

We process your personal data on the following grounds:

• Contract performance — to provide ticketing, payment, and account services.
• Legal obligation — to comply with applicable Kenyan law and financial regulations.
• Legitimate interests — fraud prevention, security, and platform improvement.
• Consent — for marketing emails and non-essential cookies.

We do not sell your personal data. We may share it with:

• Paystack — to process payments. Paystack's privacy policy governs data they handle.
• Email service providers — to send transactional and marketing emails on our behalf.
• Cloud infrastructure providers — for hosting and storage.
• Event Sellers — your name and contact details are shared with the Seller for events you purchase tickets to, solely for event management purposes.
• Law enforcement / regulators — where required by law or to protect the rights and safety of our users.

We retain your personal data for as long as your account is active or as needed to provide services. Financial transaction records are retained for 7 years as required by Kenyan tax law. You may request deletion of your account data subject to these legal retention obligations.

We use the following categories of cookies:

• Essential — required for login sessions and security. Cannot be disabled.
• Functional — remember your preferences (e.g., language).
• Analytics — help us understand how the Platform is used (e.g., page views). You can opt out.

Subject to applicable law, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request erasure of your data, subject to legal retention requirements.
• Objection — object to processing based on legitimate interests.
• Data portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, email hello@lumora.co. We will respond within 30 days.

We implement industry-standard security measures including HTTPS encryption, hashed passwords, and restricted access controls. However, no online service is 100% secure and we cannot guarantee absolute security.

Lumora is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with their data, please contact us immediately.

We may update this Privacy Policy periodically. We will notify registered users of material changes by email. Continued use of the Platform after changes are posted constitutes acceptance.

For privacy enquiries, contact us at hello@lumora.co or visit our Contact page.