Privacy Policy
Last updated: October 11, 2026
1. Who We Are
Lumen & Lever is a registered business name of Man OS Group Pty Ltd (ABN 68 685 276 304), based in Melbourne, Victoria ("Lumen & Lever", "we", "us", "our"). We operate lumenandlever.com.
This policy explains how we manage personal information collected through this website and its client portal. We handle personal information consistently with the Australian Privacy Principles in the Privacy Act 1988 (Cth) where they apply.
2. What We Collect and How
We collect personal information directly from you when you choose to use a form or create or use a client account. Depending on what you use, this may include:
- Enquiries: your name, email address, organisation, role, website, organisation size, the service you are asking about, and your message.
- Client accounts: your name, email address, organisation, role, password authentication data, and account security and sign-in records.
- Standing Check: your work email address, the website and domain submitted, verification and report records, and the result of the check.
When you use the site, our systems may also record technical information such as your IP address, browser or user-agent information, referring page, requested page, request time, and security events. We use this information to operate and protect the site, diagnose faults, and prevent misuse. We do not obtain personal information from purchased mailing lists or data brokers.
You may browse the public pages without identifying yourself. If you do not provide information required by a form, we may be unable to respond, provide a requested report, or create an account.
3. Why We Collect and Use It
We collect, hold, and use personal information to:
- respond to your enquiry and assess whether our work is relevant;
- provide requested checks, reports, account functions, and service communications;
- administer our records and improve, secure, and troubleshoot the website; and
- meet legal obligations and establish, exercise, or defend legal claims.
We do not sell, rent, or trade personal information, and we do not disclose it to other organisations for their independent marketing. We only send marketing communications with consent or where otherwise permitted by law. You may opt out at any time by replying or using any unsubscribe facility provided.
4. When We Disclose Information
We disclose personal information only where reasonably necessary for the purposes above, including to service providers acting on our instructions:
- Heroku, a Salesforce company: website, database, and application hosting;
- Mailgun: transactional email delivery; and
- professional advisers or authorities where reasonably necessary or required by law.
These providers may receive the information needed to perform their service. For example, Mailgun receives an email address and the content of an email it delivers. They are not authorised by us to use that information for their own marketing.
5. Overseas Processing
Our website hosting and email delivery providers process or store some personal information in the United States. Their approved subprocessors may operate in other countries. Where the Australian Privacy Principles apply, we take reasonable steps required by law before disclosing personal information overseas. Contact us if you would like current details relevant to your information.
6. Storage, Security, and Retention
Website records are held in access-controlled systems. We use HTTPS encryption in transit and take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. No internet or storage system is completely secure.
We keep personal information only for as long as reasonably needed for the purpose for which it was collected, our legitimate business records, and any legal obligations. Standing Check verification codes expire after 15 minutes and stale verification records are deleted after one day. We delete or de-identify other information when it is no longer required, subject to backup cycles and legal record-keeping requirements.
Information and documents handled during a paid engagement may also be governed by the engagement agreement and its confidentiality and data-handling terms.
7. Cookies
This site uses only essential cookies needed for form security, session management, and client sign-in. We do not use advertising cookies, third-party analytics, or cross-site tracking.
8. Access, Correction, and Deletion
You may ask to access or correct personal information we hold about you, or ask us to delete it where we are not required to retain it. Email hello@lumenandlever.com with enough information for us to identify the relevant record. We may need to verify your identity before acting. We do not normally charge for a request and aim to respond within 30 days. If we refuse a request, we will explain why where the law requires.
9. Privacy Complaints
Email hello@lumenandlever.com with the subject "Privacy complaint" and describe what happened. We will acknowledge the complaint, investigate it, and aim to provide a written response within 30 days.
If you are not satisfied after giving us a reasonable opportunity to respond, you may complain to the Office of the Australian Information Commissioner (OAIC) online or by calling 1300 363 992.
10. Data Breaches
We assess suspected data breaches and, where the Notifiable Data Breaches scheme applies, notify affected individuals and the OAIC when required.
11. Changes to This Policy
We may update this policy when our practices or legal obligations change. The current version will remain available on this page and show its latest revision date.
12. Contact
Privacy contact: Lumen & Lever, Man OS Group Pty Ltd, Melbourne VIC, Australia. Email hello@lumenandlever.com or call 0460 696 696.