Loading
Trust Center
Lumen is a small, founder-led practice. This page states plainly what we do, and what we do not claim.
Security practices
The site is served over HTTPS through Cloudflare.
The contact form uses a hidden honeypot field, a Cloudflare Turnstile check and rate limiting before a submission is accepted.
To detect duplicates and abuse we store a salted hash of the submitter's IP address, never the address itself.
Submitted enquiries are kept in a private database. The admin dashboard sits behind Cloudflare Access, and the server independently verifies the access token, so the dashboard stays closed unless sign-in succeeds.
An enquiry is stored before any email is sent, so a failed notification never loses your message.
Certifications
We do not currently hold any third-party security certification or attestation, and we do not display badges for any.
[CERTIFICATIONS AND ATTESTATIONS — LIST ONLY THOSE ACTUALLY HELD, WITH ISSUER AND DATE. LEAVE THIS PLACEHOLDER IN PLACE UNTIL THEN.]
Report a concern
Email harshan@lumencito.com with what you found and how to reproduce it. We aim to reply within [RESPONSE PERIOD].
Book a strategy call. Tell us what generative engines are missing about your business, and we'll shape a roadmap to fix it.