Data Privacy Policy
Version: 3
Last Updated: 2025-06-04
Enactment Date: 2025-06-05
Your privacy is important. For us at Illuminum, it is important that You feel safe with how Your Personal Data is processed with us. Below You will learn all about how we take care of Your data.
Acceptance
By using our service, You agree to the collection and use of Your information in accordance with this Privacy Policy. This policy is an integral part of our Terms of Service.
Terms with capitalized letters shall have the same meaning as in Terms of Service for Gaia by Illuminum.
This Privacy Policy does not apply to non-personal data we process on behalf of our business clients, such as consultancy services or our API. The use of such data is regulated by the terms of the consultancy agreements with those clients.
What is Personal Data and what is the processing of personal data?
Any information that can be directly or indirectly attributed to a living natural person is Personal Data. This includes names, email addresses, and social security numbers, and in some cases, images and usernames.
Processing of Personal Data is any action taken with Personal Data in IT systems, whether on mobile Devices or computers. This includes, for example, collection, registration, reading, structuring, storage, processing, transfer and deletion, etc. In some cases, actions that take place outside the IT systems can also be considered processing. This applies when Personal Data is included in registers.
Collection of Personal Data
The collection of Your Personal Data takes place, for example, when You provide Your data in connection with signing up for our software solutions, newsletters, attending webinars and physical events, ordering consulting services and/or products from us, or contacting us through various channels.
In general, we process:
name and surname;
email address;
phone number;
country;
job title;
billing address;
If business affiliated account, employer information.
If You have a paid account, Personal information needed for payment is collected by our payment processors and is subject to their terms and conditions.
We gather information about how You use our services, including the content You view, features You interact with, and actions You take. We also collect details such as Your country, access dates and times, user agent and version of your browser, type of device, and Your internet connection.
Use of Personal Data
Information obtained from Your registration process is used solely for Illuminum purposes. We process Your data to:
Provide and improve the services and products You have requested, and to manage user accounts;
Maintain and manage our relationship with You and, where applicable, manage the contract with You or Your employer;
Prevent illegal activities or misuse of our services, and to safeguard the security of our systems and services;
Coordinate real-life events, which may involve processing information about Your food preferences or intolerances.
We may use Your contact information to communicate with You for various purposes:
Service-Related Communications: we will send You important updates and other information about the service, such as planned downtime.
Surveys: we send out surveys to evaluate our courses or services.
Commercial Purposes: we may inform You about our courses, events, new services, and other offerings that we believe are in Your and our interest.
To stop receiving commercial communications, please contact our Support. You may still receive service-related communications.
Right to Access, Move, Change and Erase
You have can access and manage Your data at any time through Your Illuminum Account. As a data subject with EU/EEA residency, You have certain rights according to GDPR.
If the processing is done due to prior consent to the processing of Personal Data, You can withdraw such consent at any time by contacting us.
As a user, You have the right to know what kind of information we have stored about you. Such information can easily be obtained from us upon request.
The right to data portability allows you, as a customer, at a simple request, to disclose Your personal information to have it available as a data export.
You can always ask us to correct inaccurate information about You or ask us to delete Your personal information. As far as possible, we will respect a deletion request. If there are weighty reasons, such as the need for documentation, to not delete information, this will have to be presented and proven by us.
You can change or delete Your data as needed through Your Illuminum Account. If You delete Your Illuminum Account, all associated data will be permanently deleted, except as necessary to comply with applicable law. These rights are in accordance with the General Data Protection Regulation (GDPR).
Data Storage Duration
We retain Your data for as long as it is necessary to achieve the given purpose of the processing based on the duration of the customer relationship.
If there is a legal obligation, the information can be kept longer.
Disclosure to Third-Parties
General
We generally do not exchange Personal Data except as required by law or when necessary to provide a third-party service that You have agreed to.
Data Processors
We sometimes use third parties, like IT suppliers or sub-consultants, to help with our work. These parties are considered data processors, and we have signed data processing agreements with them. Illuminum remains responsible for managing personal data. We ensure all data processors provide sufficient security and confidentiality guarantees. Data processors are only used for purposes compatible with our data processing activities, as Illuminum is the data controller.
Independent Data Controllers
We may engage suppliers and partners to perform tasks for Illuminum, such as IT services, marketing, analytics, or statistics. These services may involve access to Your personal data. When Your personal data is shared with an independent data controller, their privacy policy and data management practices apply, and you will be informed by e-mail which you provided upon registration of your Illuminum Account, if Your Personal Data gets transferred to a 3rd party.
Sale of our business
We may transfer information to a new entity as part of the sale of our business, or within the context of a reorganization, merger, joint venture, or other business transaction. In such cases, the recipient of the information will be subject to the same restrictions on its use as we are.
Protection and Security
Confidentiality
We treat Your Personal Data as confidential, and work actively to ensure that Personal Data is handled securely within Illuminum’s protected cloud services. Our data protection practices adhere to industry standards and comply with applicable law, such as GDPR requirements. We use reasonable security measures, including encryption, to ensure privacy and confidentiality.
While we strive to prevent unauthorized access, no system is without risk. If unauthorized access occurs despite our security measures, we are not liable for any resulting damages or data transfers, except as required by applicable law.
Illuminum will always process Your Personal Data under applicable law. Should Illuminum process Your data for any purpose that requires Your consent, we will inform You of the purpose of the information processing and obtain Your consent in advance.
Server Locations for Your Private Data
We always strive for Your data to be processed primarily within the EU/EEA.
For some IT support, data may be transferred to a country outside the EU/EEA. This applies, for example, if we share Your Personal Data with a data processor who, either itself or through a subcontractor, is established or stores information in a country outside the EU/EEA.
We implement all reasonable measures to ensure Your data is protected to EU/EEA standards. When processing data outside the EU/EEA, we use appropriate safeguards, such as Standard Contractual Clauses (SCC) or Binding Corporate Rules (BCR), to maintain a high level of protection.
Data Controller
Data Controller is Illuminum AB, a limited liability company existing under Swedish law, located at Västra Ågatan 22, 753 09 Uppsala, with Swedish organization number 559359-4343 and VAT number SE559359434301.
Changes to the Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the revised policy. We encourage You to review this policy periodically to stay informed about how we are protecting Your information.
Governing law and venue
In the event that disagreements cannot be resolved amicably, the governing law and venue specified in Illuminum Terms of Service shall apply.