Privacy Policy

1. Who we are

Lumethics Ltd (“we”, “us”, “our”) operates the LumERP platform. We are registered in England and Wales. Our contact email is contact@lumethics.co.uk.

2. Information we collect

We collect information you provide directly to us, including:

• Account information — name, email address, company name, job title and password when you create an account or request a demo.
• Usage data — information about how you use the platform, including pages visited, features used and actions taken.
• Device and technical data — IP address, browser type, operating system and device identifiers.
• Business data — contracts, stock records, quality data and other commodity trading information you enter into the platform.
• Communications — information you provide when you contact us for support or enquiries.

3. How we use your information

We use the information we collect to:

• Provide, maintain and improve the LumERP platform.
• Process your demo requests and respond to enquiries.
• Send you technical notices, updates and support messages.
• Monitor and analyse usage trends to improve user experience.
• Detect, investigate and prevent fraudulent or unauthorised activity.
• Comply with legal obligations.

4. Legal basis for processing (UK GDPR)

We process your personal data on the following legal bases:

• Contract — processing necessary to provide our services to you.
• Legitimate interests — improving our platform, preventing fraud and ensuring security.
• Consent — where you have given us explicit consent, such as for marketing communications.
• Legal obligation — where we are required to process data by law.

5. Data sharing

We do not sell your personal data. We may share information with:

• Service providers — hosting, email delivery and analytics providers who process data on our behalf.
• Legal requirements — when required by law, regulation or legal process.
• Business transfers — in connection with a merger, acquisition or sale of assets.

6. Data storage and security

Your data is hosted on dedicated European infrastructure. We use encryption at rest and in transit, role-based access controls, multi-factor authentication and daily encrypted backups with 30-day retention.

7. Data retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. When you close your account, we delete or anonymise your data within 90 days, unless we are required to retain it by law.

8. Your rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Request data portability.
• Withdraw consent at any time.

To exercise any of these rights, contact us at contact@lumethics.co.uk.

9. Cookies

We use essential cookies required for the platform to function. We do not use third-party advertising or tracking cookies. Analytics cookies, if used, are anonymised and do not identify individual users.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “last updated” date.

11. Contact

If you have questions about this privacy policy or our data practices, contact us at contact@lumethics.co.uk.