Last Updated: September 11, 2026
Lumaris Research is a small US-based research firm. This policy explains what we collect when you visit lumaris.com, subscribe to The Briefing, or get in touch.
This policy does not cover survey respondents who participate in Lumaris studies. Respondents receive a separate privacy notice at the time of the survey.
What we collect
- If you subscribe to The Briefing: your email address, and a name if you provide one. Subscribing also creates a subscriber account. You sign in with a link we email you, so there is no password to set. You can update your name and email, or unsubscribe, from your account page.
- If you email us or book a consultation: your name, email, phone, organization, and whatever you write in your message. Consultations are booked through the Koalendar widget embedded on our site.
- If you comment on a post: your comment, the display name on your account, and the date are published on the site where anyone can read them. Ghost stores comments alongside your subscriber record.
- When we send The Briefing: Ghost and Mailgun record whether an issue was delivered, whether it was opened, and which links were clicked, tied to your subscriber record. We use this to see which stories land and to stop sending to addresses that no longer work.
- Automatically when you visit the site: standard web request data such as IP address, browser, pages viewed, and timestamps. Ghost, Plausible, and Cloudflare Web Analytics each receive some of this, so we can see how the site is doing and how fast it loads. If you are signed in to your subscriber account, Ghost also records which posts you read against your account.
We do not knowingly collect sensitive information (health, race, religion, biometric, precise location) through the website.
How we use it
To send The Briefing, respond to your inquiries, run and improve the site, and meet our legal and tax obligations. We also use it to keep the site working and to stop spam, abuse, and fraudulent signups.
We do not sell your information, and we do not share it for advertising.
Who we share it with
- Ghost runs the website and sends the newsletter (see ghost.org/privacy).
- Plausible Analytics counts visits and shows us where readers arrived from. It uses no cookies and does not follow individuals (see plausible.io/data-policy).
- Cloudflare Web Analytics measures how fast our pages load for real visitors, using a small script in your browser. Our traffic does not pass through Cloudflare (see cloudflare.com/privacypolicy).
- Mailgun delivers the email that Ghost sends.
- Koalendar handles consultation bookings (see koalendar.com/privacy).
- Datawrapper hosts the charts embedded in our posts. When a chart loads, Datawrapper receives the standard web request data described above (see datawrapper.de/privacy).
- jsDelivr, a public code distribution network, serves the subscribe and search scripts on our pages and receives the standard web request data described above.
- Assembly runs the client portal at portal.lumaris.com. Clients use it to exchange files and messages with us, read reference guides, ask for support, and view and pay invoices (see assembly.com/legal/privacy-policy).
- Stripe processes card and bank payments made through the portal and receives those payment details directly. We never see or store your payment card or bank account details (see stripe.com/privacy). We are moving client billing toward direct billing through our bank.
- Our business tools (email, file storage) hold messages and documents after we receive them.
- Our lawyers and accountants, when we need their help, under a duty of confidence.
These are the services we use as of the date at the top of this page.
If you are a client, we also hold the billing contact details needed to invoice you and keep our records straight.
We also disclose information when required by law, to protect our rights or users, or in connection with a business transaction, with notice to affected people.
Cookies
We have not configured non-essential cookies on this site. Ghost may use essential cookies or browser storage for member login and site features. Plausible and Cloudflare Web Analytics do not use advertising cookies. Embedded content, including the Koalendar booking widget and Datawrapper charts, may set its own cookies when it loads.
We do not run advertising or retargeting trackers, and we do not allow third parties to collect personal information about you across other websites through our site. We do not sell data, so a Do Not Track or Global Privacy Control signal does not change anything — there is nothing to opt out of.
Security
We keep only what we need, and we rely on our vendors' security controls plus protections on our own accounts. No website or email system is perfectly secure, and we will not claim otherwise. If a breach affects your information, we will notify you as required by law.
How long we keep it
Subscriber records last until you unsubscribe and ask us to delete them. Comments stay on the site until you or we remove them. Emails and client files we keep as long as the work and our tax and recordkeeping obligations require.
Your choices
- Unsubscribe from The Briefing using the link at the bottom of any issue.
- Close your account by emailing info@lumaris.com and we will delete it.
- Remove a comment by emailing info@lumaris.com.
- Ask us to delete or correct your information by emailing info@lumaris.com with "Privacy Request" in the subject line. We will respond as quickly as we reasonably can.
- Disable cookies in your browser; some site features may not work.
California residents can email info@lumaris.com to ask what information we have, request deletion, or request corrections. We handle these the same way we handle any request under "Your choices" above.
Children
Our site is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has sent us personal information, email info@lumaris.com and we will remove it.
Links to other sites
We sometimes link to other websites, including research partners, media coverage, and government or academic sources. We do not control those sites and are not responsible for their content or privacy practices. Their own policies apply once you click through.
Changes
We may update this policy. When we do, we will change the Last Updated date above. For material changes, we will post a notice at the top of this page and mention it in the next issue of The Briefing.
Contact
Lumaris Research
1100 13th St NW, Suite 800
Washington, DC 20005
info@lumaris.com
+1.888.422.6660