Privacy Policy

1. Data we collect

• Account and licence data: name, email address, licence keys, machine activation identifiers and purchase history.
• Transaction data: order records processed by our payment and licensing provider. We do not store full card details.
• Support data: the contents of emails you send us, including any system information you choose to provide.
• Marketing data: email address and consent record where you subscribe.
• Usage data: no website analytics are collected at present. If we introduce them they will be aggregated and used only with your consent. See our Cookie Policy.
• Server logs: our hosting and content delivery providers process technical request data, including IP address and browser type, to serve the site securely.

2. Why we use it, and our legal basis

• Contract: to supply software, issue and validate licences, and provide support.
• Legal obligation: to keep tax and accounting records.
• Legitimate interests: to protect against licence abuse and to maintain the security of our systems.
• Consent: for marketing emails and non-essential cookies. You may withdraw consent at any time.

3. Cancellation, trials and the right to withdraw

HRF is offered with a free trial of 28 days from the date of download. The trial requires no payment.

For paid purchases, consumers in the UK and EU normally have 14 days to withdraw from a contract for digital content. Because our products are supplied immediately as a download, you are asked at checkout to consent to immediate supply and to acknowledge that you lose the right to withdraw once the download or activation begins. If you have not downloaded or activated the licence, the 14-day right to withdraw applies in full. This mirrors the terms set out in our Terms of Service.

4. Processors and recipients

We share personal data only with providers who process it on our instructions:

• Moonbase — e-commerce, licensing and downloads.
• Amazon Web Services — hosting and storage.
• Cloudflare — content delivery and security.
• Klaviyo — email communications, where you have subscribed.
• Google Fonts — serves the typeface used on this site; your browser requests the font files directly from Google.

We do not sell personal data. We may disclose data where required by law or to establish or defend legal claims.

5. International transfers

Some providers process data outside the UK and EEA. Where they do, transfers are covered by UK International Data Transfer Agreements, EU Standard Contractual Clauses, or an adequacy decision.

6. Retention

Licence and transaction records are kept for seven years to meet accounting and tax requirements. Support correspondence is kept for up to three years. Marketing data is kept until you unsubscribe. Analytics data is retained for up to fourteen months.

7. Your rights

Under UK GDPR and EU GDPR you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time. Under the CCPA, California residents may request disclosure of the categories of personal information collected, request deletion, and are entitled not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.

To exercise any right, email info@lumusictech.com. We respond within one month. You may also complain to the UK Information Commissioner’s Office, or to your local supervisory authority.

8. Security

We use encryption in transit, access controls and reputable infrastructure providers. No system is completely secure, and we do not claim otherwise. If a breach affects your rights we will notify you and the relevant authority as required.

9. Children

Our products and site are not directed at children under 16. We do not knowingly collect their data.

10. Changes

We will update this page when our practices change and revise the date above. Material changes will be notified by email where we hold your address.