Privacy and Data Protection Policy
1. Who is responsible for your data
LUMEZY is a venture in the process of being set up. Until the entity is registered, the controller's full identifying details are not published here; they will be added to this policy as soon as registration is complete.
In the meantime, and for every purpose set out in this policy — including exercising the rights described in section 7 — the point of contact is support@lumezy.pt, answered by whoever operates this site.
2. What we process, and on what basis
This site has no forms and asks you for nothing in order to browse it. The processing that does take place is:
| Processing | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Server access logs | IP address, date and time, page requested, browser and operating system | Legitimate interest (Art. 6(1)(f)) — security, abuse detection and site operation | Generated and held by Vercel as processor, for the retention period of the plan in use. We keep no copy of these logs ourselves. |
| Contact by email | Name, email address and whatever you send us | Pre-contractual steps at your request (Art. 6(1)(b)), or legitimate interest in replying (Art. 6(1)(f)) | For the duration of the exchange and up to 3 years after the last communication |
| Booking a call | Name, email, chosen date and time, and anything you add when booking | Pre-contractual steps at your request (Art. 6(1)(b)) | For the duration of the exchange and up to 3 years after the last communication |
Bookings are handled by Calendly, on an external site. Clicking "Book a call" takes you off this site, where that platform's own privacy policy also applies.
3. What is stored on your device
This site uses no cookies — neither first-party nor third-party. There is no analytics, no tracking pixel and no advertising.
One technical entry is kept in your browser's session storage:
lumezy-seen— records that you have already seen the intro animation, so it is not repeated as you browse. It holds no identifier, cannot be used to recognise you, and is deleted automatically when you close the tab.
Because it is strictly functional and serves neither to identify nor to track you, it does not require consent.
4. External services the site relies on
To render, the page loads fonts and libraries from third-party servers. When it does, your IP address is transmitted to those providers, even though we collect nothing in the process:
- Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) — serves the Archivo typeface. Provider: Google Ireland Limited. - jsDelivr (
cdn.jsdelivr.net) — serves the GSAP animation library.
These requests happen as the page loads. The basis is our legitimate interest in presenting the site with the intended typography and behaviour (Art. 6(1)(f)).
5. Who has access to your data
We neither sell nor trade personal data. The following may have access, as processors and only as far as necessary:
- Vercel — site hosting and access logs;
- Hostinger — email service for the
lumezy.ptdomain; - Calendly — scheduling platform, if you book a call.
We may also disclose data to public authorities where the law requires it.
6. Transfers outside the European Union
Vercel and Calendly are US-based providers. Transfers to them rely on the safeguards in Chapter V of the GDPR, namely standard contractual clauses and the data processing agreements in place with each. Hostinger's email service is provided from within the European Union.
7. Your rights
As a data subject you have the right to:
- Access the data we hold about you and obtain a copy;
- Have inaccurate or incomplete data corrected;
- Have data erased, where there is no ground to keep it;
- Restrict processing, and object to processing based on legitimate interest;
- Receive your data in a structured, commonly used format (portability);
- Withdraw consent where processing relies on it, without affecting the lawfulness of processing carried out beforehand.
To exercise any of these, write to support@lumezy.pt. We reply within one month, extendable as provided for in the GDPR.
If you believe your data is not being handled lawfully, you may lodge a complaint with the supervisory authority: Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134 — 1.º, 1200-651 Lisbon, Portugal, www.cnpd.pt.
8. Security
The site is served over an encrypted connection (HTTPS), and we apply appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure. No measure is infallible, but we undertake to report any breach as the GDPR requires.
9. Children
LUMEZY's services are aimed at businesses and professionals. We do not knowingly collect data from anyone under 16.
10. Changes to this policy
This policy may be updated whenever the site starts using new tools or processing — for instance if it later includes usage statistics, a contact form or embedded content. The date at the top indicates the version in force.