1. Who we are
Lumiflow L.L.C-FZ (“Lumiflow”, “we”, “us”) is a company registered in Dubai, United Arab Emirates. This policy explains how we handle personal data when you visit lumiflow.io, contact us or work with us. For any privacy question, write to [email protected].
2. Data we collect
- Contact form and emails: your name, work email, company, the service you are interested in and your message.
- Business relationship: contact details of client and partner representatives, agreements, invoices and correspondence.
- Technical data: when you visit the website, our hosting provider automatically records server logs — IP address, browser type, requested pages and time of the request — to keep the website secure and working.
We do not ask for sensitive personal data. Please do not send it through the contact form.
3. Cookies and analytics
The website does not use cookies, analytics or advertising trackers.
4. How we use your data
- to answer your enquiry and prepare a proposal;
- to enter into and perform agreements with clients and partners;
- to keep the website and our systems secure;
- to comply with legal, tax and accounting obligations.
We do not sell personal data and do not use it for automated decision-making.
5. Legal basis
We process personal data on the basis of your consent (for example, when you send us a message), the performance of an agreement or steps taken before entering into one, our legitimate interest in running and protecting our business, and compliance with legal obligations — in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other applicable laws.
6. Who we share it with
Only with providers that help us operate and that are bound by confidentiality:
- our website hosting provider;
- our email provider (Microsoft 365 / Outlook), which stores our correspondence;
- FormSubmit, the form delivery service that forwards contact form messages to our mailbox;
- licensed payment partners, when a client project involves payment services;
- professional advisers and public authorities, where required by law.
7. International transfers
Some of these providers may process data outside the United Arab Emirates. In that case we use providers that apply appropriate safeguards to protect personal data.
8. How long we keep it
Enquiries that do not lead to an agreement are kept for up to 24 months. Agreements and accounting records are kept for as long as applicable law requires. Server logs are kept for a limited period set by our hosting provider.
9. Security
Access to personal data is limited to people who need it for their work. The website uses an encrypted connection (HTTPS), and we keep our systems updated and monitored.
10. Your rights
Subject to applicable law, you can ask us to access, correct or delete your personal data, to restrict or object to its processing, or withdraw your consent at any time. Write to [email protected] — we reply within 30 days. You may also lodge a complaint with the UAE Data Office.
11. Children
Our services are intended for businesses. We do not knowingly collect personal data from children.
12. Changes to this policy
We may update this policy from time to time. The current version is always published on this page with the date of the last update.