Effective Date: January 1st 2026

This Privacy Policy explains how personal data is collected, used, disclosed, and protected when you visit our website, interact with forms such as contact or newsletter sign-ups, and otherwise use our services. We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the UK GDPR.

We may collect the following types of personal data when you use our website:

  • Contact Information: name, email address, phone number (e.g., when you submit a contact form).
  • Technical Data: IP address, browser type, operating system, device data, and pages visited.
  • Usage Data: how you interact with the website (e.g., analytics).

Personal data means any information that can identify you directly or indirectly.

We collect personal data:

  • When you voluntarily submit it via forms (e.g., contact, newsletter).
  • Automatically through cookies and similar technologies when you browse the site.
  • From third-party services (e.g., analytics tools) as described below.

We use your personal data for the following purposes and on the corresponding legal bases:

  • To respond to inquiries: processing based on your consent or to perform pre-contractual steps.
  • To provide, improve, and secure our website: processing necessary for our legitimate business interests.
  • For analytics and performance: to understand trends and improve user experience, based on legitimate interests.

We will not process your data in ways that are incompatible with these purposes without your consent.

We use cookies and similar technologies to collect technical and usage data. This may include session cookies, persistent cookies, and third-party analytics cookies. Cookies help us improve your experience on the website. You can manage cookies through your browser settings or privacy tools.

We may share personal data with:

  • Service providers (e.g., hosting providers, analytics providers).
  • Legal authorities when required by law.
  • Third parties in connection with a business transaction (e.g., sale or transfer), subject to confidentiality obligations.

We will not sell your personal data.

Your data may be processed or stored in countries outside your home location, including via servers based in the UK or other jurisdictions. Where data is transferred outside the EU/UK, we ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place to protect your data.

We retain your personal data only as long as necessary for the purposes outlined in this policy, to comply with legal obligations, and to enforce our agreements. Specific retention periods depend on the type of data and processing purpose.

Under GDPR and UK GDPR, you have rights regarding your personal data:

  • Right to access what personal data we hold about you.
  • Right to correct inaccurate data.
  • Right to request deletion of your data.
  • Right to restrict or object to processing.
  • Right to data portability.
  • Right to withdraw consent where processing is based on consent.

To exercise your rights, contact us using the details below.

We implement reasonable technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, and destruction. However, no system can be completely secure; we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. The “Effective Date” at the top will be updated when changes are made. We encourage you to review this page regularly.

For the avoidance of doubt, the above figures are estimated savings based on real business cases and past projects experience. Actual savings will depend on several factors, including but not limited to, scope, data quality, maturity of the category and project execution.

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at: info@lumera-procurement.com.