Privacy policy

Effective date: 1 October 2026

This policy explains what personal information is handled when you use Luminary Space, why, for how long, and what you can do about it. The short version: the site itself collects nothing from you, sets no cookies, and runs no analytics. The only personal information involved is in ordinary server logs and in any email you choose to send.

1. Who is responsible for your information

The agency responsible for personal information handled through this site is:

In this policy, "the publisher" means BIBLIOTHEQUE BUSINESS CENTRE. Because the site is written for readers in New Zealand, the publisher follows the New Zealand Privacy Act 2020 and its information privacy principles. Because the publisher is established in France, the EU General Data Protection Regulation also applies, as set out in section 11.

2. What is collected

There are exactly two categories.

Server logs

When your browser requests a page, the web server hosting this site records a log entry, as almost every web server does. Each entry contains your IP address, your browser's user agent string (which describes the browser and operating system), the address of the page requested, and the date and time of the request. The site does not add anything to these logs, and they are not combined with any other information.

Email you send

If you email info@luminaryspace.online, the publisher receives your email address, your name if your email shows it, and whatever you write.

What is not collected

The site has no forms, no accounts, no newsletter, no comments and no chat. It sets no cookies, uses no browser storage, and loads no analytics, advertising or social media scripts. It makes no requests to any outside service: fonts, images and scripts are all served from this site's own server. The cookie policy gives the detail.

If you follow the affiliate link to a vendor's website, you leave this site. What the vendor and the affiliate network collect from that point is governed by their own privacy policies, not this one. This site does not pass any information about you to them; the link itself carries only a tracking code identifying this site as the referrer.

3. Why it is collected, and on what basis

• Server logs are kept to operate the site securely: to diagnose faults, to detect and block abusive traffic such as automated attacks, and to investigate a security incident if one occurs. They are not used to profile or identify visitors, and not used for marketing.
• Email is used only to read and reply to your message, and to keep a record of the correspondence in case it is referred to again, for example where you have asked for a correction or made a privacy request.

Both purposes are directly connected to running the site, consistent with information privacy principle 1, which limits collection to what is necessary for a lawful purpose.

4. How long it is kept

• Server logs: kept for 30 days, then deleted. Where a specific log entry is needed to investigate a security incident, that entry may be kept until the investigation ends, and no longer than 12 months.
• Email: kept for 24 months after the last message in the conversation, then deleted.

5. Who it is shared with, including outside New Zealand

The publisher does not sell, rent or trade personal information, and does not share it with advertisers. The only third party involved is the publisher's web hosting provider, which stores the server logs as part of running the server, and the publisher's email service provider, which stores email. Both act on the publisher's behalf and are not permitted to use the information for their own purposes.

The site makes no requests to Google Fonts or any other outside service, so no other third party receives your IP address when you visit.

Disclosure outside New Zealand. None of this information is held in New Zealand. The publisher is located in France; the server that hosts this site, and therefore its logs, is located in the United States; and the contact mailbox is provided by an email service based in Europe. Using this site or emailing the publisher therefore involves your personal information being disclosed to, and held by, recipients outside New Zealand, which information privacy principle 12 governs. The publisher uses these providers only under terms that restrict them to processing the information on its behalf and require them to keep it secure, as the GDPR requires of service providers acting for an organisation established in the EU. Information may also be disclosed to a public authority where the law requires it.

6. How it is protected

• All pages are served over HTTPS, so the content of your requests is encrypted in transit.
• Access to server logs and the contact mailbox is limited to the publisher and protected by individual login credentials.
• Logs are deleted automatically at the end of the retention period, which limits what could be exposed in any incident.
• Because the site collects so little, the information at risk is correspondingly small.

7. Your rights

Under the Privacy Act 2020 you can ask the publisher to confirm whether it holds personal information about you and to give you access to it (information privacy principle 6), and to correct information that is wrong (information privacy principle 7). To do either, email info@luminaryspace.online. To find server log entries relating to you, the publisher will need your IP address and the approximate date and time of your visit. The publisher will respond within 20 working days and will not charge for doing so.

If you are not satisfied with the response, you can complain to the Office of the Privacy Commissioner. The Commissioner's office explains how to make a complaint and generally expects you to raise the matter with the organisation first.

8. If something goes wrong

If a privacy breach occurs that it is reasonable to believe has caused, or is likely to cause, serious harm, the publisher will notify the Office of the Privacy Commissioner and the people affected as soon as practicable, as the Privacy Act 2020 requires; the Commissioner explains this notifiable privacy breach obligation on its website.

9. Children

This site is not directed at people under 16. It collects nothing from anyone, including children, beyond the server logs described above. If a person under 16 emails the publisher, the email will be answered and handled in the same way as any other, and can be deleted on request.

10. Changes to this policy

If this policy changes, the new version will be published on this page with a new effective date at the top. If a change would mean collecting information in a new way, such as introducing a cookie, the policy will be updated before that change takes effect, never after. Earlier versions are available on request.

11. Information for readers covered by the GDPR or UK GDPR

Because the publisher is established in France, the EU General Data Protection Regulation applies to its handling of personal information, and the UK GDPR applies where the reader is in the United Kingdom.

• Legal basis. Server logs are kept on the basis of legitimate interests (Article 6(1)(f)): keeping the site secure and working. Email is handled on the same basis: replying to people who write in. The site relies on no consent-based processing, because it sets no cookies and uses no tracking.
• Your rights. You have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interests. To exercise any of them, email info@luminaryspace.online.
• Complaints. You can complain to a supervisory authority. The publisher's lead authority is the French Commission nationale de l'informatique et des libertés (CNIL). You can also complain to the authority in the country where you live or work.