Privacy Policy

1. Who we are

Lume is a done-for-you email marketing team. We set up our clients' sending domains, warm them up slowly, send their campaigns from servers we run ourselves, and check bounces, complaints and blocklists after every send.

In this policy, "Lume", "we" and "us" mean the team behind lumesend.com. This policy covers the website, the free tools on it, and the information we handle when we work for clients. You can reach us at [email protected].

2. What we collect on this website

• Your email address, when you type it into a contact form. We store the address and the time you sent it. The forms ask for nothing else.
• Messages you send us, if you email us. We keep the conversation so we can follow up.
• Domain names you check in the Domain Health Checker or the Blacklist Checker. Section 4 explains how.
• Server logs. Like most websites, our web server records each request: your IP address, the page you asked for, the page that sent you here, the browser and device details your browser shares, and the time.

3. What we don't collect

• The public pages of this website set no cookies.
• We run no analytics tools, advertising trackers or tracking pixels on this website.

Our pages do load their fonts from Google Fonts, so your browser connects to Google's servers when a page opens. Section 7 has more on this.

4. How the free tools handle what you enter

Domain Health Checker and Blacklist Checker. When you check a domain, our servers look up its public DNS records (such as SPF, DKIM and DMARC) and ask public blocklists, such as Spamhaus, whether it is listed. Those lookups go out to public DNS servers and to the blocklist operators. We don't save the domain or the results in a database. The domain is part of the web address of your request, so it can appear in our server logs.

Email Header Analyzer. The analysis runs entirely in your browser. The headers you paste are not sent to our servers.

Usage counts. We count how many checks each tool runs, as a plain number per day and per month. No domain, IP address or other detail is attached to that count.

5. Why we use it

• To write back to you when you ask us to.
• To run the checks you ask for.
• To keep the site safe. Our servers use your IP address to limit how many requests one visitor can make each minute and to block abuse.
• To meet our legal obligations.

Where laws such as GDPR or LGPD apply, we rely on your request when you ask us to write back, on our legitimate interest in keeping the site secure, and on our legal obligations.

We don't sell, rent or trade your information.

6. When we send email for clients

When a client hires us, we handle the contact lists and campaign content they give us. We use them only to set up and send that client's campaigns and to deal with bounces, complaints and unsubscribes. The client decides who is emailed and why, and we act on the client's instructions.

We also keep sending records, such as delivery results, bounces, complaints, unsubscribes and, where a campaign uses tracked links, clicks. We use these records to protect our sending reputation and to report results to the client. We keep suppression lists (people who unsubscribed, complained or bounced) so those people are not emailed again.

Got an email we sent for one of our clients? Use the unsubscribe link in that email and you will not get more of that client's campaigns from us. You can also contact the sender directly, or write to [email protected] and we will help.

7. Who we share it with

We share information only with the providers we need to run the website and the service, and only what they need:

• Data centre providers that host the servers we run.
• Cloudflare, which hosts our DNS records.
• Google Fonts, which serves the fonts on our pages. Your browser asks Google for them directly, so Google receives your IP address.
• An email provider that delivers the messages we send you.
• Public DNS servers and blocklist operators, which receive the domain names you check (see section 4).

We may also share information when the law requires it.

8. How we protect it

• Every page and request on lumesend.com uses HTTPS, and browsers are told to always use it.
• Our servers limit request rates per IP address to stop abuse.
• Access to stored data is limited to our team.

No system is perfectly secure, so we can't promise that nothing will ever go wrong. If a breach affects your information, we will tell you as the law requires.

9. How long we keep it

• Contact form emails and messages: until you ask us to delete them, or until we no longer need them to talk with you.
• Server logs: for a limited time, for security and to fix problems.
• Client lists and content: while we work together, then as set out in the client's written agreement.
• Suppression records: for as long as we send for that client, because deleting them would let people who opted out be emailed again.

10. Your rights

Depending on where you live (for example under GDPR in Europe or LGPD in Brazil), you can ask us to:

• give you a copy of the personal data we hold about you
• correct data that is wrong
• delete your data
• give you your data in a format a machine can read
• stop using your data for a particular purpose

To ask, email [email protected]. We will answer within the time the law gives us. You can also complain to your local data protection authority.

11. Children

This website and our service are not meant for anyone under 16. We don't knowingly collect information from children.

12. Links to other sites

Our website links to other sites. We don't control how they handle your data, so please read their privacy policies.

13. Changes to this policy

If we change this policy, we will post the new version on this page and update the date at the top.

14. Contact

Questions about this policy or your data: [email protected]. Our terms of service are at lumesend.com/terms.

Questions about this page? Get in touch.