Privacy Policy

We only collect what we need to talk to you, deliver our services, and keep the website running. Specifically:

• Form submissions. When you fill out our audit or contact form, we collect your name, business email, phone number, company name, the service you're interested in, and any message you choose to send.
• Email correspondence. If you email us directly, we receive your email address and the contents of your message.
• Usage and device data. When you visit the site, our analytics tools automatically receive standard log information — IP address, browser type, device type, referring URL, pages visited, and timestamps.
• Cookies and similar technologies. See the Cookies section below for details.

We do not knowingly collect special-category data (health, religion, political views, biometrics) and we ask you not to send it to us through our forms or by email.

We use your personal data to:

• Respond to your enquiry and run your free audit.
• Deliver, support, and improve the services you've engaged us for.
• Send service-related emails (proposals, project updates, invoices).
• Understand how the site is used so we can fix issues and improve the content and performance.
• Comply with our legal and regulatory obligations.

Our lawful bases for processing are: your consent (where required), performance of a contract (where you're a client or about to become one), and our legitimate business interests in operating and improving our services.

We do not sell your personal data, and we do not use it to train AI models.

We use a small number of cookies and analytics scripts to keep the site working and to understand traffic at an aggregate level.

• Google Analytics — measures aggregated visitor behaviour (pages, sessions, source). IP addresses are processed in line with Google's policies.
• First-party analytics — a lightweight script we host to count page views and core events.
• Strictly necessary cookies — used to remember preferences (e.g. UI state) and to keep the site secure.

You can block or delete cookies through your browser settings, and you can opt out of Google Analytics via the Google Analytics opt-out add-on. Blocking essential cookies may break parts of the site.

We share personal data only with trusted service providers ("sub-processors") who help us run the business, and only to the extent strictly necessary:

• Hosting & infrastructure — to serve the website and store project files.
• Email delivery (Resend) — to deliver transactional email and form notifications.
• Analytics (Google Analytics) — to understand aggregated site usage.
• Productivity tools — that we use internally to manage projects and communications.

We may also disclose information when required by law, to protect our rights, or in connection with a corporate transaction (e.g. a merger or acquisition). We never sell your data to third parties.

We keep personal data only for as long as we need it for the purpose it was collected, or to comply with our legal obligations.

• Lead form submissions — retained for up to 24 months from the last interaction, then deleted or anonymised.
• Client records and invoices — retained for the period required by Mauritian tax and corporate law (typically 7 years).
• Analytics data — retained per our analytics provider's default settings (Google Analytics: 14 months).

Depending on where you live, you may have the following rights over your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data (subject to legal limits).
• Restriction — ask us to pause processing in certain situations.
• Objection — object to processing based on legitimate interests.
• Portability — receive your data in a portable format.
• Withdraw consent — at any time, where consent is the basis.

To exercise any of these rights, email us at hello@lumetryx.mu. We'll respond within 30 days. If you're in Mauritius, you can also lodge a complaint with the Data Protection Office; in the EU/UK, with your local supervisory authority.

We protect your data with reasonable technical and organisational measures, including encryption in transit (HTTPS/TLS), restricted access to systems, secrets management, and regular review of our sub-processors.

No system is perfectly secure. If we ever become aware of a breach affecting your personal data, we'll notify you and the relevant authorities as required by law.

Lumetryx is based in Mauritius, but some of our sub-processors operate servers in other countries (typically the EU and the United States). Where we transfer personal data outside Mauritius, we rely on appropriate safeguards — such as Standard Contractual Clauses or transfer mechanisms offered by the provider — to keep your data protected.

Our website and services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we'll delete it.

We may update this policy from time to time to reflect changes in our practices or the law. The latest version will always be at this URL, and we'll update the "last updated" date at the top. For material changes, we'll do our best to notify you directly.

Questions, requests, or concerns about this policy or your personal data?

Lumetryx Solutions Ltd.
Port Louis, Mauritius
Email: hello@lumetryx.mu