Lumeriq Ltd. (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This notice explains how we comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
This notice applies to all visitors, clients, and users of our website and services.
01Data Controller
Lumeriq Ltd.
Brighton, United Kingdom
Email: francois.steque@lumeriq.co.uk
Company Number: 17383700
We are responsible for determining how and why your personal data is processed.
02What Personal Data We Collect
Information you provide
- Name
- Email address
- Phone number
- Business information
- Project details
- Enquiry or message content
- Payment information (processed securely via third‑party providers)
Information collected automatically
- IP address
- Device and browser type
- Pages visited
- Time spent on site
- Cookie preferences
- Analytics data (only with consent)
Information from third parties
- Analytics platforms
- Advertising platforms
- Payment processors
- CRM or automation tools
03Why We Process Your Data (Lawful Basis)
We process personal data under the following lawful bases:
Contract
To deliver services you request, including onboarding, communication, and project delivery.
Consent
For:
- Marketing communications
- Analytics cookies
- Non-essential tracking technologies
You may withdraw consent at any time.
Legitimate Interests
For:
- Website security
- Fraud prevention
- Improving our services
- Business operations
Legal Obligation
For:
- Tax and accounting requirements
- Regulatory compliance
04How We Use Your Data
We use your data to:
- Provide and manage our services
- Respond to enquiries
- Improve website performance
- Personalise user experience
- Send marketing communications (only with consent)
- Maintain security and prevent fraud
- Comply with legal obligations
We do not sell your personal data.
05Sharing Your Data
We may share your data with trusted third parties, including:
- Website hosting providers
- Analytics platforms (only with consent)
- CRM and automation tools
- Payment processors
- Professional advisors (legal, accounting)
All third‑party processors are vetted for GDPR compliance.
06International Data Transfers
Some third‑party providers may process data outside the UK or EEA.
When this occurs, we ensure:
- Adequate safeguards
- Standard Contractual Clauses (SCCs)
- GDPR‑compliant protection measures
07Data Retention
We retain personal data only as long as necessary for:
- Service delivery
- Legal obligations
- Accounting and tax requirements
- Business operations
Marketing data is retained until you withdraw consent.
08Your Rights Under UK GDPR
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict processing
- Object to processing
- Withdraw consent
- Request data portability
To exercise any of these rights, contact: francois.steque@lumeriq.co.uk
We will respond within 30 days.
09Cookies & Tracking Technologies
We use cookies to:
- Enable essential website functionality
- Analyse website usage (only with consent)
- Support marketing and advertising (only with consent)
You can manage or withdraw cookie consent at any time via our Cookie Settings link.
Full details are available in our Cookie Policy.
10Security Measures
We use appropriate technical and organisational measures to protect your data, including:
- Encrypted storage
- Secure servers
- Access controls
- Regular security reviews
- GDPR‑compliant third‑party processors
11Complaints
If you have concerns about how we handle your data, contact:
If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner’s Office (ICO):
12Updates to This Notice
We may update this GDPR & Data Protection Notice from time to time.
The latest version will always be available on this page.