Privacy Policy

1. Who we are

Lumora Marketing Limited (“we”, “us”, “our”), company number 17362211, registered office 107 Roman Road, London, E6 3RY, is the data controller for the personal information described in this policy. We are committed to handling data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What information we collect

We collect personal information that you provide directly to us, including:

• Contact details — name, email address, phone number, company name and postal address
• Enquiry details — the service you’re interested in, your approximate budget, and anything else you share via our contact form
• Marketing preferences — whether you have opted in to receive marketing communications
• Client campaign data — where you become a client, data relating to your advertising accounts, website analytics, and marketing performance, only as needed to deliver our services
• Careers data — CVs and applications submitted for open roles
• Technical and usage data — collected automatically via cookies, such as pages visited and browser type (see Section 6)

3. Why we collect it

We use your personal information for the following purposes:

• To respond to enquiries and provide quotations (performance of a contract or steps prior to entering one)
• To deliver marketing services you have engaged us for, including managing advertising accounts on your behalf (performance of a contract)
• To send marketing communications where you have given consent (consent)
• To assess job applications where you have applied for a role (steps prior to entering a contract)
• To maintain business records, accounting and tax compliance (legal obligation)
• To improve our website through aggregated analytics (legitimate interests, where you have consented to analytics cookies)
• To protect our business, prevent fraud, and comply with legal requirements (legal obligation and legitimate interests)

4. How we store your information

Personal data is stored securely using reputable hosting, email and project management providers, with access restricted to team members who need it to carry out their role. We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse.

5. Who we share it with

We do not sell your personal information. We may share limited data with:

• Advertising and analytics platforms (such as Google or Meta) where necessary to run campaigns on a client’s behalf, under each platform’s own data protection terms
• Service providers who support our business operations, such as email, hosting and accounting providers, bound by data protection agreements
• Regulatory or legal authorities, where required by law

Any third parties who process data on our behalf are required to protect it in line with UK GDPR and only use it for the purposes we specify.

6. Cookies and analytics

Our website uses cookies to operate correctly, understand how the site is used, and — where you consent — support marketing activity. You can manage your cookie preferences at any time via “Cookie Settings” in the footer, or read our full Cookie Policy for details of each cookie we use.

7. Data retention periods

We keep personal data only for as long as necessary for the purpose it was collected:

• Enquiry details that do not result in a client engagement: up to 12 months, then deleted
• Client account and campaign records: up to 7 years, to meet accounting and tax obligations
• Job applications: up to 12 months, unless you join the team
• Marketing consent records: until you withdraw consent, plus a reasonable period to evidence that withdrawal
• Website analytics data: typically retained in anonymised or aggregated form for up to 26 months

8. Your rights under UK GDPR

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your data, where applicable
• Restrict or object to certain processing of your data
• Withdraw marketing consent at any time
• Request a copy of your personal data in a portable format
• Lodge a complaint with the Information Commissioner’s Office (ICO)

You can exercise these rights at any time via our Data & Marketing Opt-Out page, or by contacting us directly using the details below.

9. Contact us about privacy

For any question about this policy or your personal data, please contact us at privacy@lumoramarketing.co.uk or write to us at 107 Roman Road, London, E6 3RY.

If you remain unhappy with how we have handled your data, you have the right to complain to the Information Commissioner’s Office at ico.org.uk.