Privacy Policy

1. Data Controller

The data controller for personal data collected on this site is:

For any questions regarding your personal data, you can contact us at the address above.

2. Personal Data Collected

2.1 Data you provide directly

• Contact / quote form: full name, email address, phone / WhatsApp number, city, client type, message.
• Kit order form: full name, email, phone / WhatsApp, city, client type, kit concerned, message.
• Newsletter: email address.

2.2 Automatically collected data

• Navigation data: anonymised IP address, browser type, pages visited, visit duration, referral source.
• Technical data: device type, operating system, screen resolution.

We do not collect sensitive data (health, ethnic origin, political opinions, religious beliefs, biometric data).

3. Purposes and Legal Bases

4. Data Retention

• Contact and quote data: 3 years from the last contact.
• Newsletter data: until unsubscription or withdrawal of consent.
• Navigation data: maximum 13 months.
• Contract-related data: 5 years after contract end (legal obligation).

After these periods, data is deleted or irreversibly anonymised.

5. Data Sharing and Recipients

We do not sell or rent your personal data to third parties. Your data may be shared with the following recipients, strictly within the scope of the purposes described:

• Hosting provider: Cloudflare Inc. (site hosted via Cloudflare Pages, USA — covered by European Commission standard contractual clauses).
• Automation tool: n8n (form processing, data transmitted via secure HTTPS webhook).
• Instant messaging: Meta Platforms / WhatsApp (when you initiate a WhatsApp contact from our site).

No data transfers are made to third countries without appropriate safeguards.

6. Cookies and Trackers

Our site uses a minimal number of cookies strictly necessary for technical operation (session, security). We do not use advertising or third-party tracking cookies.

Cookies used

You can configure your browser to refuse cookies. This may affect certain site features.

7. Your Rights

Under GDPR, you have the following rights over your personal data:

• Right of access: obtain confirmation that data about you is being processed and receive a copy.
• Right of rectification: correct inaccurate or incomplete data.
• Right to erasure: request deletion of your data ("right to be forgotten"), subject to our legal obligations.
• Right to restriction of processing: temporarily restrict the use of your data.
• Right to data portability: receive your data in a structured, readable format.
• Right to object: object to the processing of your data for reasons relating to your particular situation.
• Right to withdraw consent: withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise these rights, contact us at: Sales@lumx-group.com. We will respond within one month. If you are unsatisfied with our response, you may lodge a complaint with the competent data protection authority.

8. Data Security

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or alteration:

• HTTPS encryption (TLS 1.3) on all communications.
• Hosting on Cloudflare with DDoS protection and web application firewall.
• Data access restricted to authorised team members only.
• No payment data stored on our servers.

9. Children's Data

Our site is intended for an adult audience. We do not knowingly collect personal data from persons under 16. If you are a parent or guardian and believe your child has provided us with data, please contact us so we can delete it.

10. Policy Updates

We reserve the right to update this policy at any time to reflect legal, technical or operational changes. The last updated date will be revised at the top of this page. For material changes, we will notify you by email (if you are subscribed to our newsletter) or via a visible notice on the site.

11. Contact

For any questions about this policy or your personal data: