Privacy Policy

1. Who We Are

Lumorin is a website design agency based in the United Kingdom. We design and build custom, mobile-responsive websites for small and medium-sized businesses across industries — including local services, e-commerce brands, startups, consultants, and professional services.

For any questions about this privacy policy or how we handle your data, you can contact us at:

• Email: lumorin.team@gmail.com
• Phone: (+44) 7880693296

2. What Information We Collect

We collect information in the following ways:

Information You Provide Directly

When you fill out a contact form, request a quote, or engage us for a project, we may collect:

• Your name
• Email address
• Phone number
• Business name and website details
• Project requirements and any other information you choose to share with us

Information Collected Automatically

When you visit our website, we automatically collect certain information through cookies and analytics tools, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring website or search engine

Payment Information

We do not store or directly process your payment card details. All payments are processed securely through third-party payment providers (such as Stripe). These providers handle your payment information in accordance with their own privacy policies and security standards (PCI DSS).

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to enquiries and quote requests — when you reach out via our contact form or by email, we use your details to reply and provide the information you've asked for.
• To deliver our services — if you become a client, we use your contact and project information to design, build, and deliver your website.
• To send project updates and communications — we'll keep you informed about the progress of your project and any relevant account-related matters.
• To improve our website and services — we analyse how visitors use our site so we can make it better and more useful.
• To send marketing communications — only if you've given us your explicit consent. You can opt out at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly.
• To comply with legal obligations — such as maintaining financial records for tax purposes or responding to lawful requests from authorities.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases to process your personal data:

• Consent — where you have given clear consent for us to process your data for a specific purpose (e.g., marketing emails).
• Contract — where processing is necessary to perform a contract with you (e.g., delivering website design services you've commissioned).
• Legitimate interests — where processing is necessary for our legitimate business interests, such as improving our services or responding to your enquiries, and those interests are not overridden by your rights.
• Legal obligation — where we need to comply with a legal or regulatory requirement.

5. Cookies

Our website uses cookies — small text files placed on your device — to help the site function properly, analyse how visitors use it, and improve your experience.

We use the following types of cookies:

• Essential cookies — necessary for the website to work correctly (e.g., form submission and security features).
• Analytics cookies — help us understand how visitors use our site so we can improve it (e.g., which pages are most visited).
• Functional cookies — remember your preferences to give you a better experience on return visits.

When you first visit our site, you'll see a cookie consent banner that lets you choose which optional cookies to accept. You can also manage or disable cookies at any time through your browser settings. Please note that disabling certain cookies may affect how the website functions.

For more detailed information about how to manage cookies in your specific browser, visit aboutcookies.org.

6. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We only share your data in the following limited circumstances:

• Service providers — we work with trusted third-party providers who help us run our business, such as website hosting, email services, analytics, and payment processing. These providers only access the data they need to perform their specific function and are contractually required to protect it.
• Legal compliance — we may disclose information if required by law, regulation, or a valid legal request (e.g., from a court or regulatory authority).
• Business transfers — in the unlikely event that our business or its assets are sold or transferred, your data may be part of that transfer. We will notify you before your data is transferred and becomes subject to a different privacy policy.

7. Data Storage & Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction.

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Specific retention periods depend on the type of data:

• Enquiry data — retained for up to 12 months after your last contact with us, unless you become a client.
• Client project data — retained for the duration of the project and for a reasonable period afterwards to provide ongoing support.
• Financial records — retained for the period required by UK tax law (typically 6 years).

After the relevant retention period, your data is securely deleted or anonymised.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right to access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct any inaccurate or incomplete information.
• Right to erasure — you can ask us to delete your personal data in certain circumstances (also known as the "right to be forgotten").
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
• Right to data portability — you can request a copy of your data in a structured, commonly used, and machine-readable format, and have it transferred to another organisation.
• Right to object — you can object to our processing of your data in certain situations, including direct marketing.
• Right to withdraw consent — where we rely on your consent to process data, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at lumorin.team@gmail.com. We will respond to your request within one month. There is no fee for exercising these rights, unless your request is manifestly unfounded or excessive.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). You can visit their website at ico.org.uk.

9. Third-Party Links

Our website may contain links to third-party websites, plugins, or services that are not operated or controlled by Lumorin. This privacy policy does not apply to those third-party sites. We encourage you to review the privacy policy of every website you visit. We are not responsible for the content, privacy practices, or data handling of third-party websites.

10. Children's Privacy

Our website and services are not directed at children under the age of 16, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from a child without verified parental consent, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your data.

12. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please get in touch:

• Email: lumorin.team@gmail.com
• Phone: (+44) 7880693296

We aim to respond to all privacy-related enquiries within 48 hours.