Privacy & measurement
This notice explains how Lumaivo Ltd handles contact details, technical website requests and optional website analytics, including the choices available to every visitor.
01 / Who is responsible
Lumaivo Ltd (company number 17343816) is responsible for personal information handled through this website. Our registered office is 5 Horton Drive, Upper Lighthorne, Leamington Spa, England, CV33 8AH. For privacy questions, email info@lumaivo.com.
02 / Contact
We receive the name, email address, company, selected topic and message you choose to submit. We use that information to respond, understand the requested work, manage a potential or active business relationship, and protect the form from abuse. Our lawful basis is our legitimate interest in responding to business enquiries and operating our website. We do not send those form fields to Google Analytics.
The form sends your enquiry through Resend, an email-delivery service operated by Plus Five Five, Inc. Resend processes the contact details and brief to deliver the message to Lumaivo. This may involve processing outside the UK, including in the United States, under contractual safeguards described in Resend’s Data Processing Addendum.
We keep enquiry information only for as long as reasonably needed to answer the enquiry, manage the resulting business relationship and meet legal or accounting obligations. We review it and delete it when it is no longer needed.
03 / Hosting and security
This website is served through Cloudflare Pages and Functions. Cloudflare processes technical request data such as your IP address, requested URL, HTTP headers, browser or device information and security signals so it can deliver the site, prevent abuse and diagnose service problems. Our lawful basis is our legitimate interest in operating and securing the website. This website does not create a separate application-level request log; any platform logs available to Lumaivo are used only for security and diagnosis and kept only for as long as they are needed for those purposes.
When Cloudflare handles customer personal data and Customer Logs on Lumaivo’s behalf, Cloudflare acts as a processor and may process that data outside the UK under the transfer safeguards in its Data Processing Addendum. Cloudflare also processes traffic-derived “Network Data” to operate, analyse and secure its services under its service terms; that processing is not solely on our behalf.
04 / Optional measurement
If you accept analytics, Google Analytics records pseudonymous identifiers, page paths, page titles, browser/device information, approximate location and event categories such as a contact-page click or a successfully accepted enquiry. It does not receive the contact-form fields. Google may set _ga and _ga_* cookies for up to two years; their expiry may be renewed by a later consented visit. Your consent is our lawful basis for this measurement; advertising storage, Google Signals and ad personalisation are disabled by this website. See Google’s GA4 cookie information.
Consented Enhanced Measurement may also record scroll depth, outbound-link clicks and file downloads. Automatic form-interaction measurement is disabled so a lead is recorded only after the contact service confirms success. Automatic browser-history page changes are disabled because this site records one sanitised page view for each route without query strings, fragments or browser referrer data. GA4 user-level and event-level data is currently configured for two-month retention. “Reset on new activity” is enabled, which resets only the retention period for a user identifier when that user generates a new event; it does not extend the retention of every historical event.
Google acts as a processor for the analytics data collected on our behalf and may process it outside the UK. Google states that it relies in certain circumstances on the UK Extension to the EU–US Data Privacy Framework for transfers to the United States and may rely on standard contractual clauses where an applicable transfer framework is unavailable. See Google’s international data-transfer information and Data Processing Terms. If you reject analytics before it is enabled, the Google tag is not loaded. If you withdraw after accepting, this site stops sending analytics events, tells Google that analytics storage is denied and clears analytics cookies. The already-loaded tag may still send a limited consent-state signal until it leaves the page on your next reload.
05 / Your choices
Depending on the circumstances, you may ask for access to or correction of your personal information, request deletion or restriction, object to processing, or ask for data portability. You can withdraw analytics consent at any time through “Manage analytics preferences” in the footer without affecting access to the site. Withdrawing consent does not affect processing that was lawful before withdrawal.
To exercise a right or raise a privacy concern, email info@lumaivo.com. You may also complain to the UK Information Commissioner’s Office.