Privacy Policy

This Privacy Policy explains how OrcaLumi (“we”, “us”, “our”) collects, uses, stores, and discloses your personal information. OrcaLumi (ABN 49 294 045 089) is operated by Arun Prakash as a sole trader registered in New South Wales, Australia.

We are committed to handling your personal information in accordance with the Australian Privacy Principles (“APPs”) under the Privacy Act 1988 (Cth).

By using our website (orcalumi.ai) or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

We only collect personal information that is reasonably necessary to provide our services and respond to your enquiries.

Through the Website

• Contact form submissions — your first name, last name, and message content when you submit an enquiry through our website.
• Mailing list — your email address and name if you subscribe to our mailing list or newsletter.
• Technical data — our hosting provider (Vercel) may automatically collect standard server log data such as your IP address, browser type, and pages visited. We do not currently use analytics or tracking tools on our website.

Through Consulting Engagements

• Contact details such as name, email address, phone number, and job title.
• Business information relevant to the engagement, such as company name, role, and project details.
• Records of emails, messages, and other correspondence between you and OrcaLumi.
• Any other information you provide to us in the course of an engagement.

We do not collect sensitive information (such as health, racial, or political information) unless you provide it to us voluntarily and it is directly relevant to a consulting engagement.

We use your personal information for the following purposes:

• To respond to enquiries submitted through our website.
• To deliver consulting, training, and education services.
• To manage and administer consulting engagements, including scheduling, communications, and project coordination.
• To send you updates, resources, or newsletters if you have opted in to our mailing list.
• To issue invoices and manage payments.
• To comply with our legal obligations.
• To improve our website and services.

We will not use your personal information for purposes other than those outlined above without your consent, unless required or authorised by law.

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These steps include the use of cloud-based tools with appropriate access controls and secure communication channels.

We retain personal information only for as long as it is needed for the purposes described in this policy or as required by law. As a general guide:

• Website enquiries — retained for up to 12 months after the enquiry is resolved, unless the enquiry leads to a consulting engagement.
• Client engagement records — retained for up to 7 years after the engagement ends to meet our legal and tax obligations.
• Mailing list data — retained until you unsubscribe or request removal.

When personal information is no longer needed, we will take reasonable steps to destroy or de-identify it.

We do not sell, rent, or trade your personal information.

We may share your personal information with third parties only in the following circumstances:

• Service providers — we use third-party tools to operate our business (such as email, hosting, invoicing, and mailing list platforms). These providers may process your data on our behalf and are required to handle it in accordance with their own privacy obligations.
• Legal requirements — where we are required to disclose information by law, regulation, or court order.
• With your consent — where you have given us permission to share your information for a specific purpose.

Our consulting services may involve OrcaLumi accessing or working with your business’s confidential information, internal processes, systems, and proprietary data. We treat all information shared during an engagement as confidential.

Where appropriate, a separate confidentiality agreement or non-disclosure agreement (NDA) will be agreed upon before work begins. The terms of any individual client agreement, including any data handling or confidentiality provisions, will take precedence over this Privacy Policy where they apply.

Our website is hosted on Vercel, which may process technical data on servers located outside Australia (see Section 11). Our services may also involve the use of other third-party platforms and tools. Each of these services has its own privacy policy, and we encourage you to review them. OrcaLumi is not responsible for the privacy practices of third-party providers.

We do not currently use cookies or similar tracking technologies on our website. If this changes in the future, we will update this policy and provide you with appropriate notice.

If you subscribe to our mailing list, we will use your email address to send you updates, resources, and information about our services. You can unsubscribe at any time by using the unsubscribe link included in each email or by contacting us directly at hello@orcalumi.ai.

Under the Australian Privacy Principles:

• Access (APP 12) — you have the right to request access to the personal information we hold about you. We will provide access within 30 days of your request, unless an exception under the Privacy Act applies.
• Correction (APP 13) — you have the right to request that we correct any personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.

In addition, if your personal information is no longer needed for the purposes described in this policy, you may request that we destroy or de-identify it in accordance with our obligations under APP 11.2, subject to any legal requirements we may have to retain it.

If you have provided consent for a specific use of your information (such as subscribing to our mailing list), you may withdraw that consent at any time by contacting us.

To exercise any of these rights, please contact us at hello@orcalumi.ai. We may need to verify your identity before processing your request.

Some of the third-party tools we use, including our hosting provider Vercel, may store or process data on servers located outside Australia, including in the United States. In accordance with APP 8, we take reasonable steps to ensure that any overseas recipients of your personal information handle it in a manner consistent with the APPs.

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a person under 18, we will take reasonable steps to delete it.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of our website or services after any changes constitutes acceptance of the revised policy.

If you believe we have breached the APPs or mishandled your personal information, please contact us at hello@orcalumi.ai. We will investigate your complaint and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

If you have any questions about this Privacy Policy, please contact us:

OrcaLumi
Email: hello@orcalumi.ai