who we are.
Lumo ("we", "us", "our") is the AI enablement company, based in London, United Kingdom. We are the data controller for information collected through this website. If you have any questions about this policy or your data, email us at hello@lumochange.com.
[To confirm before launch: registered company name and number, registered address, and ICO registration reference.]
what we collect.
We keep this deliberately small.
- Enquiries. When you use our contact form, we collect your name, work email, company (if you choose to give it) and the message you send.
- Accounts. If you sign up to read our insights reports, we collect your name, email address, phone number and company, and we store a sign-in token in your browser so you stay logged in.
- Analytics. If you accept analytics cookies, Google Analytics records how you use the site (pages viewed, sign-ups started, reports downloaded). If you decline, none of this is collected and no analytics cookies are set.
- Technical data. To serve the site securely, our hosting and the services below may process limited technical data such as your IP address and browser type.
We do not use advertising or cross-site tracking, and we never sell your data.
cookies.
We set a sign-in cookie if you create an account, which is necessary for the site to remember you. Analytics cookies are only set after you accept them in the banner. You can change your choice at any time using the "cookie preferences" link in the footer - declining after accepting deletes the analytics cookies.
how we use it.
We use the information you send us to respond to your enquiry and, where it makes sense, to arrange a 30-minute intro call. Account details let us give you access to our insights reports. Analytics, if you allow them, tell us which content is useful. We also use technical data to keep the site secure and working. We do not sell your data, and we do not use it for advertising.
legal basis.
Under UK GDPR, we rely on our legitimate interests - responding to enquiries and running our business - and on taking the steps you ask us to take when you get in touch. For analytics cookies we rely on your consent. You can object to processing based on legitimate interests, or withdraw consent, at any time.
who we share it with.
We use a small number of trusted providers to run the site. Each processes only what it needs to:
- FormSubmit (formsubmit.co) - receives contact-form submissions and delivers them to us by email.
- Google Analytics - measures site usage, only if you accept analytics cookies.
- Google Fonts - serving the site's typography exposes your IP address to Google.
- Resend - delivers the sign-in codes we email to account holders.
- Vercel - hosts the site.
- Google Cloud (Firestore) - stores account records.
Some of these providers may process data outside the UK. Where they do, appropriate safeguards apply to protect it.
how long we keep it.
We keep enquiry correspondence for as long as we need it to deal with your request and for a reasonable period afterwards, then we delete it. Account records are kept until you ask us to delete them. [Retention period to confirm before launch.]
your rights.
Under UK data protection law you can ask us to: give you access to the data we hold about you; correct it; delete it; restrict or object to how we use it; or provide it in a portable format. To exercise any of these, email hello@lumochange.comand we'll respond within the time the law allows.
complaints.
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.
changes to this policy.
We may update this policy from time to time. The date at the top shows when it last changed.