/privacy

Privacy policy.

How we handle personal data. Written plainly, aligned with GDPR.

// last_updated · May 2026

1. Who we are

lumio labs Kft. ("lumio labs", "we") is the data controller for personal data processed via this website. Registered at 1112 Budapest, Gulyas koz 9/C, Hungary. Company registration number: 01 09 304202. Tax number: HU26143343.

You can reach us at [email protected] for any privacy-related question.

2. What personal data we collect

We only collect what we need to respond to you and run the website:

  • Contact form submissions — name, email, company, role, project type, project stage, approximate budget, timeline, and the description you write.
  • Email correspondence — anything you send us at [email protected].
  • Technical logs — IP address, browser type, and pages visited, kept by our hosting provider for security and performance.
  • Analytics — aggregate, cookieless visit data. No personal identifiers.

3. Why we collect it, and the legal basis

Contact form & email correspondence
To respond to your inquiry and, if relevant, enter into a contract with you. Legal basis: contract / pre-contractual steps (GDPR Art. 6(1)(b)) and your consent for any optional follow-up.
Technical logs
To keep the site available and secure. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
Analytics
To understand at an aggregate level which pages are useful. Legal basis: legitimate interest (GDPR Art. 6(1)(f)). No personal data is processed for this purpose.

4. How long we keep it

  • Contact form submissions and email correspondence: 24 months after our last contact, then deleted.
  • Technical logs: typically 30–90 days, depending on hosting provider defaults.
  • Analytics: aggregate only; no per-person history.

5. Who we share it with

We do not sell personal data, ever. We share it only with service providers strictly necessary for running the site or responding to you:

  • Cloudflare, Inc. — hosting and CDN (data processed in the EU and globally; GDPR-aligned safeguards via Standard Contractual Clauses).
  • Email provider — Google Workspace, for receiving and sending mail.
  • Analytics — Cloudflare, Inc..

6. International transfers

Where data is transferred outside the EEA (for example, parts of Cloudflare's global edge network), we rely on EU Standard Contractual Clauses and the provider's supplementary safeguards.

7. Your rights

Under GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. To exercise any of these, email [email protected] and we will respond within 30 days.

You can also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) — naih.hu.

8. Cookies

We aim to run cookieless analytics, so by default this site does not set tracking cookies. See our cookie policy for the current state and any updates.

9. Changes to this policy

We will update this page when our practices change, and bump the "last updated" date at the top. Material changes will be flagged on the homepage.

// cookie policy

1. What cookies are

Cookies are small text files a website stores in your browser. They can remember preferences, keep you logged in, or track your activity across sites.

2. What this website uses

By design, this website uses cookieless analytics, so we do not set tracking cookies. The only cookies that may appear are:

  • Strictly necessary — set by our hosting provider for security and to detect abuse. These do not track you across sites.
  • Functional — set only if you explicitly opt into something that needs them (currently: none).

3. Third-party content

This website embeds fonts from Google Fonts and may embed a calendar booking widget. These third parties may set cookies under their own policies:

We are working to self-host fonts before production launch, which removes the Google Fonts dependency entirely.

4. How to manage cookies

You can clear or block cookies via your browser settings. Most browsers also offer a "Do Not Track" signal.

5. Changes

If we ever add tracking cookies, we will update this page and present a consent banner before any cookie is set.