Privacy Statement
Effective date: August 25, 2026
Your privacy matters to us. We want you to understand what happens to the information you share with us without making you wade through unnecessary legal language.
Who We Are
This website is operated by the Resilience Toolkit Training Alliance, a DBA (“doing business as” name) of Lumos Transforms. Lumos Transforms is based in Los Angeles, California, United States. For the personal information described in this statement, Lumos Transforms is the organization responsible for deciding how and why that information is used.
If you have questions about your privacy or want to exercise any of your rights, you can contact us at info@lumostransforms.com or +1-323-254-7775.
What We Collect
We collect information you choose to share with us, such as your name, email address, phone number, registration information, and anything you include in a form or message. If you make an accessibility request, you may also choose to share information related to your access needs. Please share only what is relevant; you do not need to provide a diagnosis.
When you use our website, we may also receive technical information such as your IP address, browser or device information, pages visited, referring pages, and information collected through cookies or similar technologies.
We may also receive information from services you use to interact with us, such as registration, payment, email, or community platforms. The information we receive depends on the service and how you use it.
Some information is necessary to register, make a payment, receive a service, or complete a request. If you do not provide that information, we may not be able to complete that request. Other information is optional.
How and Why We Use Your Information
We use personal information to respond to questions and requests; provide programs, registrations, resources, or other services you ask for; communicate with you about those services; operate and protect our website; understand how our website is being used; and meet legal, accounting, or administrative requirements.
Under the GDPR and UK GDPR, our legal basis depends on what we are doing. We may process information because you have asked us to take steps or provide a service, because we have a legal obligation, because it is necessary for our legitimate interests in operating, securing, administering, and improving our services where those interests do not override your rights, or because you have given us consent.
We use consent when it is required, including for optional analytics, certain marketing communications, and some information that receives additional protection under data protection law. If we need your explicit consent, we will ask for it when we collect the information. You can withdraw consent at any time.
We do not use your personal information to make solely automated decisions that have legal or similarly significant effects on you.
Email and Marketing
If you sign up for newsletters or other promotional communications, we will use your information to send them to you where permitted by law and, when required, with your consent.
You can unsubscribe at any time using the link in an email or by contacting us. Unsubscribing from marketing does not prevent us from sending information you need about a program, registration, purchase, or request you have made.
Cookies and Analytics
Our website uses cookies and similar technologies for basic website functions and security. We also use analytics to understand how people use our website.
Necessary cookies are always active. Analytics technologies are off unless you choose to allow them. You can change your choice at any time through the cookie settings available on our website.
When We Share Information
We do not sell your personal information.
We may share information with service providers that help us operate our website and deliver our work, such as website hosting and security providers, form and email systems, analytics services, and registration, event, or payment platforms when you use them. We provide them only with the information needed to perform those services.
We may also disclose information when required by law, to protect someone’s safety or legal rights, or to establish, exercise, or defend legal claims.
International Processing
Lumos Transforms is based in the United States, so information from people outside the United States may be processed here. Some of our service providers may also process information in other countries. You can contact us if you would like more information about the safeguards that apply to your information.
Where the GDPR or UK GDPR requires safeguards for an international transfer of personal information, we use an appropriate legal mechanism, such as an applicable adequacy framework or approved contractual safeguards.
How Long We Keep Information
We keep personal information only for as long as we reasonably need it for the purpose for which it was collected, including any legal, accounting, security, or recordkeeping requirements.
When information is no longer needed, we delete or anonymize it where appropriate. We may keep limited information necessary to honor an unsubscribe or other privacy request.
Your Privacy Rights
Depending on where you live and the circumstances, you may have the right to access the personal information we hold about you; correct inaccurate or incomplete information; ask us to delete or restrict our use of your information; receive certain information in a portable format; object to certain uses of your information; and withdraw consent where our use of your information is based on consent.
If we use your information based on our legitimate interests, you may have the right to object to that use. You can always object to the use of your personal information for direct marketing.
To make a request, you can use our Data Request Form at the bottom of this page or contact info@lumostransforms.com. We may need to confirm your identity before completing some requests.
If the GDPR or UK GDPR applies to you, you also have the right to raise a concern with the data protection authority where you live or work. In the United Kingdom, this is the Information Commissioner’s Office (ICO).
Keeping Information Secure
We use appropriate technical and organizational measures to protect personal information against loss, misuse, unauthorized access, disclosure, or alteration. No system or method of transmitting information online can be guaranteed to be completely secure.
Other Websites
Our website may link to websites or services operated by other organizations. Their privacy practices are governed by their own policies, not this one.
Changes to This Statement
We may update this Privacy Statement as our services, technology, or legal obligations change. The current version and its effective date will always be posted on our website.
If we make a significant change to how we use personal information, we will provide additional notice when appropriate.
Data Request Form
