Clear purposes
We use information for a stated business reason. We do not collect personal details simply because they might be useful later.
UK GDPR privacy notice
Privacy Policy
Your privacy matters. We collect only what we need to answer your enquiry, discuss our services, and keep our business records accurate.
Read your rights
01 / THE BASICS
How this policy applies
This GDPR privacy notice covers personal data collected when you use this website, contact Lumina Advisory Group Ltd by telephone or email, or ask about our business consulting services.
Careful access
Access is limited to people and providers who need the information to respond, communicate, or maintain the website.
Defined retention
We normally keep enquiry information for up to two years after our last interaction, unless a longer period is required by law.
02 / DATA HANDLING
How we handle your data
Each part of our process has a practical limit. The details below explain what we collect, why we use it, and what choices you have.
What information we collect
You may provide your name, email address, telephone number, company details, and the content of your enquiry. We only ask for details that help us respond or discuss a potential working relationship.
Why we use it
We use contact details to reply to enquiries, arrange conversations, provide requested information, and deliver agreed services. We may use business contact information for relevant development activity where this is permitted by law.
Lawful bases for processing
When you submit a contact form or ask us to respond, processing is based on your consent or on steps taken at your request. For relevant business communication, we may rely on legitimate interests. We consider your rights before using that basis.
Retention and deletion
We usually retain enquiry records for two years after the last interaction. We remove or anonymise information when it is no longer needed, unless a legal, accounting, or dispute-related reason requires continued retention.
Your rights under UK GDPR
You can ask us to:
- provide a copy of the personal data we hold
- correct inaccurate or incomplete information
- erase information in appropriate circumstances
- restrict or object to certain processing
- provide eligible data in a portable format
Requests are handled within the time required by data protection law. Identity checks may be needed.
03 / WEBSITE CONTROLS
Cookies, sharing and security
The website is designed to keep data use proportionate. Here is what that means in practice.
Cookies
We use minimal cookies needed for site functionality. We do not use tracking cookies without the consent required by law.
Data sharing
We do not sell personal data. We may share limited information with website, email, hosting, or other service providers where they need it to support our work.
Security
We use HTTPS for encrypted transmission and apply access controls. No online system can remove every risk, so please avoid sending sensitive information through a general enquiry.
04 / QUESTIONS OR CONCERNS
Contact us about your data
To exercise your rights or ask how we use your information, email us or call the Harrow office. We will explain the next step plainly.
If you remain concerned, you can contact the Information Commissioner's Office (ICO) at ico.org.uk.