/privacy

Privacy policy.

How we handle personal data. Written plainly, aligned with GDPR.

// last_updated · [date] · scaffold pending legal review

1. Who we are

Lumio Labs Kft. ("Lumio Labs", "we") is the data controller for personal data processed via this website. Registered at [full address], Hungary. Company registration number: [Cg.]. Tax number: [adószám].

You can reach us at lumiolabs@lumiolabs.io for any privacy-related question.

2. What personal data we collect

We only collect what we need to respond to you and run the website:

  • Contact form submissions — name, email, company, role, project type, project stage, approximate budget, timeline, and the description you write.
  • Email correspondence — anything you send us at lumiolabs@lumiolabs.io.
  • Technical logs — IP address, browser type, and pages visited, kept by our hosting provider for security and performance.
  • Analytics — aggregate, cookieless visit data via [Plausible / Fathom / other]. No personal identifiers.

3. Why we collect it, and the legal basis

Contact form & email correspondence
To respond to your inquiry and, if relevant, enter into a contract with you. Legal basis: contract / pre-contractual steps (GDPR Art. 6(1)(b)) and your consent for any optional follow-up.
Technical logs
To keep the site available and secure. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
Analytics
To understand at an aggregate level which pages are useful. Legal basis: legitimate interest (GDPR Art. 6(1)(f)). No personal data is processed for this purpose.

4. How long we keep it

  • Contact form submissions and email correspondence: [e.g., 24 months] after our last contact, then deleted.
  • Technical logs: typically 30–90 days, depending on hosting provider defaults.
  • Analytics: aggregate only; no per-person history.

5. Who we share it with

We do not sell personal data, ever. We share it only with service providers strictly necessary for running the site or responding to you:

  • Cloudflare, Inc. — hosting and CDN (data processed in the EU and globally; GDPR-aligned safeguards via Standard Contractual Clauses).
  • Email provider — [provider name], for receiving and sending mail.
  • Analytics — [Plausible (EU-hosted) / other].

6. International transfers

Where data is transferred outside the EEA (for example, parts of Cloudflare's global edge network), we rely on EU Standard Contractual Clauses and the provider's supplementary safeguards.

7. Your rights

Under GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. To exercise any of these, email lumiolabs@lumiolabs.io and we will respond within 30 days.

You can also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) — naih.hu.

8. Cookies

We aim to run cookieless analytics, so by default this site does not set tracking cookies. See our cookie policy for the current state and any updates.

9. Changes to this policy

We will update this page when our practices change, and bump the "last updated" date at the top. Material changes will be flagged on the homepage.