Privacy policy

Who we are

The controller of your personal data on this website is:

• LumoraX
• Sofia, Mladost 1
• Company ID (EIK): 23293092942
• Email: support@lumos-now-internal.tech

In this policy, “LumoraX”, “we” and “us” mean this company. Lumos Now is our product.

What this policy covers

This policy covers the Lumos Now website and its contact forms. It does not cover the Lumos Now app that our customers use: there, each customer decides how its data is used, and we process that data on the customer’s behalf under our agreement and data processing agreement with them.

What we collect and why

When you write to us

When you send the contact form or the demo request, we receive your name and work email, and anything else you choose to add: your company, country, type of business, team size, what you are interested in and your message. We also receive the page you sent it from and the language you were using.

We use this to reply to you, arrange a demo or pilot, and prepare an offer. The legal basis is taking steps at your request before a possible contract (Article 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Article 6(1)(f) GDPR).

When you visit

Like any website, our server receives your IP address, your browser’s user agent and the time of each request. Our web server records these in its logs, and the contact form keeps your IP address in memory for up to 24 hours to stop abuse (at most three messages in ten minutes). The legal basis is our legitimate interest in keeping the website secure and free of spam (Article 6(1)(f) GDPR).

What we don’t do

We don’t use analytics, advertising trackers, social media plugins or fingerprinting. Fonts and images come from our own server, so loading the page does not tell any other company that you visited. We never sell personal data.

Who receives your data

Your message reaches our team as a ticket in our own Lumos Now instance and, if that is not available, by email. The only other companies involved are the provider that hosts our server and the provider of our mailbox. They process the data only on our instructions, under data processing agreements.

If any of them processes data outside the European Economic Area, we rely on an adequacy decision of the European Commission or on its standard contractual clauses. You can ask us for the names of our providers at any time.

How long we keep it

• Enquiries: as long as we need them to answer you and follow up, and no longer than 24 months after our last contact, unless you become a customer, in which case our agreement with you applies.
• Server logs with IP addresses: a short time for security, normally no longer than 30 days.
• The spam check in the contact form: up to 24 hours, in memory only.

Your rights

You can ask us for access to your personal data, to correct it, to delete it, to restrict how we use it, to receive it in a portable format, and you can object to our use of it based on legitimate interest. Write to us at the address above; we reply within one month.

You can also complain to a data protection authority. In Bulgaria this is the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg. If you live elsewhere in the EU, you can contact the authority in your country.

Cookies and storage in your browser

This website sets no cookies. To work the way you left it, it keeps a few small settings in your browser’s storage. They never leave your device, are not used to recognise or track you, and need no consent because they only provide what you asked for.

You can remove them at any time by clearing this site’s data in your browser settings.

Security

The website is only served over HTTPS. The contact form service runs on our own server, is not reachable from the internet directly, and keeps no database of messages.

Changes to this policy

If we change how we handle personal data, we update this page and the date at the top.

Contact

Questions about this policy or your data: support@lumos-now-internal.tech.