DRAFT — Attorney review pending. Not approved for production.

Privacy Policy

Last drafted: July 21, 2026

1. Introduction

Lumos Innovations ("Lumos," "we," "us") respects your privacy. This Privacy Policy explains what information we collect through lumosinnovations.com (the "Site"), how we use it, and the choices you have. This policy covers Site visitors and prospects; information handled under a signed client engagement (including any Controlled Unclassified Information, CUI) is instead governed by the confidentiality and data-handling terms of that signed agreement.

2. Information We Collect

Information you provide directly:

  • Contact form submissions (name, email, phone, company name, message content)
  • Calendly booking details (name, email, meeting time)
  • Toolkit/lead-magnet download requests (name, email)

Information collected automatically:

  • IP address, browser type, device type, referring URL
  • Pages visited and time on Site, via analytics tools

We do not knowingly collect information from children under 13, and the Site is not directed to children.

3. How We Use Information

We use the information collected to:

  • Respond to inquiries and schedule consultations
  • Deliver requested toolkit materials
  • Improve the Site's content and user experience
  • Send occasional readiness-related updates (opt-out available on every email)
  • Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties.

4. Cookies and Analytics

The Site may use cookies or similar technologies (e.g., website analytics, scheduling widget) to remember preferences and understand aggregate visitor behavior. You can configure your browser to refuse cookies; some Site features may not function as intended if you do.

5. Third-Party Service Providers

We use third-party tools to operate the Site and deliver Services, which may include:

  • Website hosting and form-handling infrastructure
  • Calendly (scheduling)
  • Email delivery/CRM tools
  • Analytics providers

These providers process data only as needed to perform their function for us and are not authorized to use your information for their own marketing purposes.

6. Data Retention

We retain contact and inquiry information for as long as needed to respond to your request, maintain our business records, and meet legal or contractual obligations. Client-engagement data (SSPs, POA&Ms, evidence artifacts) is retained per the data-handling terms of the signed engagement agreement, not this policy.

7. Data Security

We use reasonable administrative, technical, and physical safeguards to protect information submitted through the Site. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Choices and Rights

You may:

  • Request access to, correction of, or deletion of personal information you've submitted through the Site
  • Unsubscribe from marketing emails at any time via the link in any email
  • Contact us with privacy questions using the Site's contact form

Depending on your state of residence, you may have additional rights under applicable state privacy law (e.g., Ohio does not currently have a comprehensive consumer privacy statute in effect, but this may change).

9. CUI and Federal Data Handling

Because Lumos serves Defense Industrial Base clients, any Controlled Unclassified Information (CUI), Federal Contract Information (FCI), or similar sensitive data shared during a paid engagement is handled under the data-protection, access-control, and confidentiality terms of the signed SOW/Master Services Agreement — not under this Site-level Privacy Policy, which applies only to Site-visitor and prospect data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last drafted" date above reflects the most recent revision. Continued use of the Site after changes are posted constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy can be directed via the contact form on the Site.