Privacy Policy
Last Updated: August 2026
At Lumina, we believe privacy is an essential part of creating a safe and respectful environment.
This Privacy Policy explains how Lumina collects, uses, stores, protects, and discloses personal information when you visit our website, contact us, request information, participate in a screening, make a reservation, attend a retreat or ceremony, or otherwise interact with our services.
Because some of our screening processes may involve information about your health, medications, mental health, psychiatric history, or other personal circumstances, we take handling this information very seriously.
This Privacy Policy is intended to provide clear information about our practices while recognizing that some processing may be subject to additional legal requirements depending on where you live.
Lumina is located in Mexico and primarily operates under applicable Mexican privacy and data-protection law.
Before publication: Replace the bracketed information throughout this policy with Lumina's final legal business name, address, privacy email address, and website domain.
1. Who Is Responsible for Your Information
The entity responsible for the collection and processing of your personal information is:
Legal Business Name: [LEGAL BUSINESS NAME]
Trading Name: Lumina
Address: Tulum, Mexico
Privacy Contact: [PRIVACY EMAIL]
Website: [DOMAIN]
For purposes of this Privacy Policy, "Lumina," "we," "us," and "our" refer to the responsible entity identified above.
2. Information We Collect
We collect information that you voluntarily provide to us as well as certain information that is automatically collected when you use our website.
The information we collect depends on how you interact with Lumina. Information you provide may include:
-
Full name
-
Email address
-
Telephone or WhatsApp number
-
Country of residence
-
Preferred language
-
Date of birth or age
-
Travel and arrival information
-
Accommodation information
-
Emergency contact information
-
Booking and reservation details
-
Payment and transaction information
-
Communications with Lumina
-
Information provided during consultations or screening calls
-
Information provided when requesting a particular ceremony or retreat
-
Feedback, reviews, or other information you voluntarily provide
Screening information
For ceremonies and practices that require screening, we may ask for information relevant to determining whether participation is appropriate. Depending on the ceremony, this may include:
-
Current medications
-
Previous medications where relevant
-
Medical history
-
Cardiovascular history
-
Neurological conditions
-
Mental-health or psychiatric history
-
Relevant family psychiatric history
-
Previous experience with Ayahuasca, Bufo, Kambo, Sananga, Mambe & Ambil, or other practices
-
Current or recent substance use where relevant to safety screening
-
Pregnancy or breastfeeding status where relevant
-
Allergies or other relevant health information
-
Other information reasonably necessary to conduct an appropriate safety assessment
Some of this information may constitute sensitive personal data under applicable law.
We do not request sensitive information simply for curiosity or marketing purposes. Screening information is collected because it may be relevant to determining whether participation in a particular ceremony is appropriate.
3. Sensitive Personal Data
Some information collected during our screening process may be considered sensitive personal information, particularly information relating to physical or mental health.
Under Mexican law, health information is among the categories that may receive heightened protection, and sensitive personal data is subject to additional requirements concerning consent and handling. We therefore seek to:
-
Collect only information that is relevant to the applicable purpose
-
Limit access to individuals who need the information for screening, safety, or service delivery
-
Maintain confidentiality obligations for people handling the information
-
Apply appropriate administrative, technical, and physical safeguards
-
Avoid using screening information for advertising or unrelated marketing
-
Limit retention of sensitive information to what is reasonably necessary
Where applicable, Lumina will obtain the consent required by law before processing sensitive personal information.
4. Why We Collect Your Information
We may process your information for the following purposes:
Providing and managing our services
Including:
-
Responding to inquiries
-
Providing information about Lumina
-
Scheduling consultations and screening calls
-
Processing reservations
-
Managing retreat stays
-
Organizing ceremony participation
-
Providing preparation information
-
Providing post-ceremony integration support
-
Communicating important information concerning your booking or participation
Including:
-
Assessing whether a particular ceremony may be appropriate for you
-
Identifying relevant contraindications or exclusions
-
Determining whether additional information or medical clearance may be appropriate
-
Communicating preparation requirements
-
Supporting appropriate practitioner decision-making
Screening is conducted separately for practices where different safety considerations apply. For example, information relevant to an Ayahuasca screening does not automatically establish clearance for Kambo, Bufo, Sananga, or another ceremony.
Business administration
Including:
-
Processing payments
-
Maintaining booking records
-
Managing customer relationships
-
Maintaining accounting and transaction records
-
Resolving disputes
-
Preventing fraud or misuse
-
Maintaining appropriate business records
Website and service improvement
Including:
-
Understanding how visitors use our website
-
Improving website functionality
-
Identifying technical problems
-
Improving our content and services
-
Measuring website performance
-
Understanding general visitor trends
Communications and marketing
Where permitted and where you have provided the necessary consent, we may use your contact information to send:
-
Lumina news
-
Retreat information
-
Ceremony announcements
-
Preparation resources
-
Educational material
-
Special offers
-
Other marketing communications
You may opt out of marketing communications at any time.
5. Screening Information Is Not Used for Marketing
Information provided during a safety or eligibility screening is treated differently from ordinary marketing information.
We will not use your:
-
Medical history
-
Medication information
-
Psychiatric history
-
Screening responses
-
Contraindication information
-
Personal safety disclosures
We also do not sell screening information.
6. Screening Does Not Create a Medical Relationship
-
Lumina's screening process exists to determine whether participation in a particular retreat, ceremony, or practice may be appropriate. Screening is not a medical examination, diagnosis, or substitute for professional medical advice.
-
Lumina does not replace your physician, psychiatrist, psychologist, therapist, or other healthcare professional.
-
If you have a medical condition, take medication, or have concerns about whether participation is appropriate for you, you may be asked to consult your own healthcare professional.
-
Lumina may decline participation where the information provided indicates that a ceremony is not appropriate or where the required safety information cannot be adequately established.
7. How We Collect Information
Information may be collected through:
-
Website forms
-
Contact forms
-
Booking forms
-
Screening questionnaires
-
Screening calls
-
Email
-
WhatsApp or other messaging services
-
Telephone conversations
-
In-person interactions
-
Payment and reservation systems
-
Cookies and website technologies
-
Third-party booking or service platforms
Where information is collected electronically, we will provide the applicable privacy information required by law.
8. Information Collected Automatically
When you visit our website, certain technical information may be collected automatically. This may include:
-
IP address
-
Browser type
-
Device type
-
Operating system
-
Pages visited
-
Time spent on pages
-
Referring website
-
Approximate location derived from technical information
-
Date and time of visits
-
Website interactions
-
Technical and diagnostic information
This information may be collected through cookies, analytics tools, pixels, tags, and similar technologies.
9. Cookies and Similar Technologies
Lumina may use cookies and similar technologies to:
-
Operate the website
-
Remember preferences
-
Improve website functionality
-
Understand website traffic
-
Measure website performance
-
Analyze visitor behavior
-
Improve our services
-
Measure marketing campaigns where applicable
You can control certain cookies through your browser or device settings.
Some cookies may be necessary for the website to function and cannot be disabled without affecting website functionality.
Where legally required, we will provide additional cookie controls or consent mechanisms.
10. Third-Party Service Providers
Lumina uses third-party providers to help operate the website and provide our services. Depending on the final technology used by the site, these may include providers for:
-
Website hosting
-
Website management
-
Booking and reservations
-
Payment processing
-
Email delivery
-
Customer communications
-
Analytics
-
Advertising measurement
-
Cloud storage
-
Forms and questionnaires
-
Scheduling
-
Customer relationship management
These providers may process personal information on our behalf.
We seek to use reputable providers and to limit their access to information to what is reasonably necessary for the services they provide.
11. Payments
-
Payments may be processed through third-party payment providers.
-
When you make a payment, your payment information may be transmitted directly to the applicable payment processor.
-
Lumina does not intentionally store complete credit-card numbers or security codes on its own website systems.
-
Payment providers may process your information according to their own privacy policies and terms.
12. Sharing Your Information
We do not sell your personal information. We may disclose personal information when reasonably necessary for the purposes described in this Privacy Policy. Depending on the circumstances, this may include sharing appropriate information with:
-
Lumina practitioners
-
Screening personnel
-
Retreat staff
-
Guest-support personnel
-
Booking and reservation providers
-
Payment processors
-
Website and technology providers
-
Email and communication providers
-
Professional advisers
-
Accountants or legal advisers
-
Insurance providers where applicable
-
Emergency personnel where reasonably necessary to protect someone's safety
-
Government authorities where required by law
We will seek to limit disclosures to the information reasonably necessary for the relevant purpose.
13. Practitioner and Ceremony Information
-
Some ceremonies are conducted by practitioners who may work with Lumina independently or as part of the Lumina team.
-
Where appropriate, information necessary for your participation may be shared with the practitioner responsible for your ceremony. This may include relevant screening information and participation requirements.
-
Sensitive information will not be shared with practitioners who do not need it for the relevant safety or service purpose.
14. Emergency Situations
-
If we reasonably believe that disclosure of information is necessary to protect someone's life, health, or physical safety, we may disclose appropriate information to emergency personnel, healthcare providers, authorities, or other persons capable of responding to the situation.
-
Where an emergency requires action and obtaining prior consent is not reasonably possible, information may be disclosed to the extent permitted by applicable law.
15. International Transfers
-
Lumina operates in Mexico and may serve guests from countries around the world.
-
Some of our technology and service providers may store or process information outside Mexico.
-
As a result, your information may be transferred to or processed in another country.
-
Where applicable, Lumina will take reasonable steps to ensure that such transfers are handled in accordance with applicable privacy requirements.
-
If you are located in the European Economic Area or another jurisdiction whose privacy laws apply to our processing of your information, additional rights or protections may apply.
-
The GDPR, for example, can apply to organizations outside the European Union where they offer services to individuals located in the EU or monitor their behavior there.
16. European Privacy Rights
Where the GDPR applies to our processing of your personal information, you may have additional rights, including:
-
The right to access your personal data
-
The right to correct inaccurate information
-
The right to request deletion
-
The right to restrict processing
-
The right to object to certain processing
-
The right to data portability
-
The right to withdraw consent where processing is based on consent
-
The right to lodge a complaint with a competent data-protection authority
Health information is treated as a specially protected category of personal data under the GDPR.
Nothing in this section is intended to represent that GDPR applies to every visitor or every processing activity. Its applicability depends on the circumstances and applicable law.
17. Marketing Communications
If you subscribe to Lumina's mailing list or otherwise consent to marketing communications, we may contact you with information about:
-
Retreats
-
Ceremonies
-
Preparation resources
-
Integration resources
-
New services
-
Events
-
Educational content
-
Promotions
You can unsubscribe at any time.
Marketing opt-out requests will not prevent us from sending necessary service-related communications, such as:
-
Booking confirmations
-
Screening communications
-
Payment notices
-
Schedule changes
-
Safety information
-
Other communications necessary to provide a service you have requested
18. WhatsApp and Messaging
-
If you choose to communicate with Lumina through WhatsApp or another messaging platform, information exchanged through that platform may also be subject to the privacy practices and terms of that third-party provider.
-
We recommend avoiding unnecessary transmission of highly sensitive medical information through ordinary messaging channels unless specifically requested as part of an approved screening process.
-
Where possible, sensitive screening information should be submitted through the designated screening process.
19. Confidentiality
-
Lumina expects employees, practitioners, contractors, and other individuals who have access to personal information to maintain appropriate confidentiality.
-
Access to sensitive information should be limited according to the person's role and responsibilities.
-
Confidentiality obligations may continue after an individual's relationship with Lumina ends.
-
Mexican law likewise requires appropriate confidentiality controls for individuals involved in the processing of personal data.
20. Data Security
Lumina maintains reasonable administrative, technical, and physical safeguards designed to protect personal information against:
-
Unauthorized access
-
Unauthorized disclosure
-
Loss
-
Alteration
-
Destruction
-
Improper use
-
Other unauthorized processing
Security measures may include access controls, password protection, restricted access, secure systems, confidentiality obligations, and other safeguards appropriate to the nature of the information.
No electronic system or method of transmission can be guaranteed to be completely secure.
21. Security Incidents
-
If a security incident occurs that materially affects personal information, Lumina will take appropriate steps to investigate, contain, and address the incident.
-
Where required by applicable law, affected individuals or relevant authorities will be notified.
-
Mexican law requires appropriate security measures and provides for notification where a security breach significantly affects the rights of data subjects.
22. How Long We Keep Your Information
We retain information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. Different categories of information may therefore be retained for different periods.
For example:
Booking and transaction information
May be retained as necessary for:
-
Accounting
-
Tax
-
Financial records
-
Contractual obligations
-
Dispute resolution
-
Legal compliance
Screening information
-
Sensitive screening information will be retained for the minimum period reasonably necessary for its intended purpose, subject to applicable legal, safety, contractual, and regulatory requirements.
-
We will periodically consider whether continued retention is necessary.
-
Where information is no longer required, we may delete, anonymize, or securely dispose of it.
23. Your Privacy Rights in Mexico
-
Subject to applicable law, you may have the right to:
-
Access — request information about the personal data we hold about you.
-
Rectification — request correction of inaccurate or incomplete information.
-
Cancellation — request deletion or cancellation of your personal information where legally permitted.
-
Opposition — object to certain processing of your personal information.
-
These are commonly known as ARCO rights under Mexican data-protection law.
-
You may also have the right to withdraw consent where processing is based on consent and to limit certain uses or disclosures.
24. How to Exercise Your Rights
To exercise your privacy rights or ask questions about how your information is handled, contact:
Privacy Contact: [PRIVACY EMAIL]
Legal Business Name: [LEGAL BUSINESS NAME]
Please provide enough information for us to reasonably identify you and understand your request. Depending on the nature of the request, we may need to verify your identity before providing information or making changes. We will handle requests within the timeframes required by applicable law.
25. Limiting the Use of Your Information
You may contact us if you wish to limit certain uses of your personal information, particularly for:
-
Marketing communications
-
Promotional communications
-
Certain optional communications
-
Certain optional processing activities
Where applicable, Lumina will provide mechanisms through which you can express your refusal to optional processing or transfers that require your consent. This does not necessarily prevent processing that is required to provide a service you have requested, or that is otherwise permitted or required by law.
26. Withdrawal of Consent
Where we rely on your consent to process personal information, you may withdraw that consent by contacting us using the information provided in this Privacy Policy. Withdrawal of consent does not necessarily affect processing that:
-
Occurred before withdrawal
-
Is required to fulfill a contract
-
Is necessary to comply with a legal obligation
-
Is otherwise permitted by applicable law
In some circumstances, withdrawing consent may mean that Lumina cannot provide a particular service or continue a particular screening process.
27. Children's Privacy
-
Lumina's services are intended for adults unless a particular program expressly states otherwise.
-
We do not knowingly collect personal information from children for services that are not intended for them.
-
If we become aware that we have collected personal information from a child without the appropriate authorization or legal basis, we will take reasonable steps to address the situation.
28. Third-Party Websites
The Lumina website may contain links to websites or services operated by third parties. These may include:
-
Booking platforms
-
Payment providers
-
Social-media platforms
-
Travel resources
-
Partner organizations
-
Practitioner websites
-
External educational resources
Once you leave the Lumina website, the privacy practices of that third party apply.
Lumina is not responsible for the privacy practices, security, or content of third-party websites.
29. Social Media
-
Lumina may maintain profiles or pages on social-media platforms.
-
If you interact with Lumina through social media, the platform may collect and process information according to its own privacy policy.
-
We may receive information that you choose to make available through those platforms.
-
We will not intentionally publish private screening, medical, or sensitive personal information without appropriate authorization.
30. Reviews, Testimonials, and Photographs
-
If you voluntarily provide a testimonial, review, photograph, video, or other content to Lumina for promotional use, we may use that content for the purposes for which you authorized us to use it.
-
We will not identify you in promotional materials using sensitive personal information without appropriate permission.
-
If you provide a testimonial or photograph and later wish to withdraw permission for future promotional use, contact us at [PRIVACY EMAIL].
-
Withdrawal will apply to future use where reasonably possible but may not permit removal from materials that have already been distributed or published by third parties.
31. No Sale of Personal Information
-
Lumina does not sell personal information.
-
We may use third-party service providers to operate our website, process payments, manage bookings, communicate with guests, or provide other business services.
-
Such relationships do not constitute a sale of your personal information.
32. Information You Choose to Share Publicly
-
Please remember that information you voluntarily post publicly—for example, in a public social-media comment or publicly visible review—may be viewed and used by others.
-
Do not post medical, psychiatric, medication, or other sensitive personal information publicly if you do not want that information to be accessible to others.
33. Accuracy of Your Information
We ask that you provide accurate and current information, particularly during safety screening. This is especially important when providing information about:
-
Medications
-
Medical conditions
-
Psychiatric history
-
Allergies
-
Pregnancy
-
Previous experiences
-
Other information relevant to participation
Lumina may rely on the information you provide when determining whether additional screening or professional consultation is necessary.
Providing incomplete or inaccurate information may affect our ability to assess participation appropriately.
34. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
-
Changes to our services
-
New technology
-
Changes to our website
-
Changes to our service providers
-
Changes in applicable law
-
Changes to our privacy practices
The most recent version will always display the Last Updated date at the top of this page.
Where required by law, we will provide additional notice or obtain consent before implementing material changes.
35. Contact Lumina
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information has been handled, please contact us:
Lumina
Legal Business Name: [LEGAL BUSINESS NAME]
Privacy Email: [PRIVACY EMAIL]
Physical Address: [FULL ADDRESS]
Website: [DOMAIN]