Website analytics and service improvement
We use limited website usage data to understand traffic, improve site performance, maintain security, and develop our services.
Lawful basis: Legitimate interests, where analytics are strictly necessary, proportionate, and balanced against individual rights. Where non-essential cookies or tracking technologies are used, we rely on consent where required.
Contact forms, enquiries, and demo requests
When you contact us, request information, or ask for a demo, we process the information you submit to respond to your enquiry and manage pre-contract discussions.
Lawful basis: Taking steps at your request prior to entering into a contract, and our legitimate interests in responding to business enquiries.
Account creation, onboarding, and customer administration
If you become a customer, we process account, identity, organisation, and service-use data to provide the platform, administer access, and manage the customer relationship.
Lawful basis: Performance of a contract, and legitimate interests in operating, securing, and improving our services.
Product operations, platform security, and audit logging
We process technical, account, and activity data to authenticate users, enforce permissions, monitor misuse, investigate incidents, maintain audit trails, and protect service integrity.
Lawful basis: Legitimate interests in securing our systems, customers, users, and services; and, where applicable, compliance with legal obligations.
Transactional service communications
We send service-related emails or messages such as account notices, security alerts, approval requests, and operational updates.
Lawful basis: Performance of a contract, and legitimate interests in operating a secure and reliable service.
Marketing communications
Where you opt in to receive product updates, newsletters, or promotional communications, we process your contact details to send them.
Lawful basis: Consent, where required by law, or legitimate interests where permitted for existing business contacts under applicable rules.
Client-delivered platform services
Where Lumio-Tek processes personal data within customer environments, workflows, or managed service features, we may act as a processor on the client’s behalf, with the client acting as controller for that data.
Lawful basis: Determined by the relevant client as controller; our processing is carried out under their documented instructions.