Privacy Policy
Last updated: 7 October 2026
This Privacy Policy explains how Lumenix AI Ltd ("Lumenix.ai", "we", "us", or "our") collects, uses, and protects personal information when you visit our website at lumenix.ai, contact us, or subscribe to our service communications program (SMS, WhatsApp, or voice calls).
1. Who We Are
Lumenix AI Ltd is a UK-incorporated company (company number 15711110), registered at 86–90 Paul Street, London, England, EC2A 4NE. We act as the data controller for the personal information described in this Policy. You can reach us at info@lumenix.ai.
2. Information We Collect
- Contact information you submit voluntarily: name, email address, mobile phone number, company name, and message content.
- Service-channel opt-in records: when you tick a consent box for SMS, WhatsApp, or voice calls, we record the timestamp, IP address, the version of the consent disclosure shown to you, the phone number provided, and which specific channels you consented to. This evidences your express, channel-specific consent.
- Payment information: handled directly by Stripe when you book a consultation. We do not store card details on our servers.
- Technical information: IP address, browser type, device, and pages viewed (for security and analytics).
3. How We Use Your Information
- To respond to enquiries and deliver requested services;
- To send transactional and support SMS, WhatsApp messages, or voice calls (account notifications, support responses, system updates, AI agent interactions) — only if you have opted in to that channel;
- To process payments and issue invoices;
- To comply with legal, accounting, and regulatory obligations;
- To protect our website and detect fraudulent or abusive activity.
4. Legal Bases (UK GDPR)
- Consent — for SMS, WhatsApp, and voice communications. You can withdraw consent at any time.
- Contract — to deliver consulting and development services you've requested.
- Legitimate interests — to operate, secure, and improve our website.
- Legal obligation — for tax, accounting, and other statutory record-keeping.
5. Service Communications (SMS, WhatsApp & Voice)
If you opt in, we may contact you through up to three independent channels: SMS, WhatsApp, and voice calls. Messages and calls cover transactional and support topics — account notifications, support responses, system updates, and AI agent interactions. Each channel requires its own express consent — ticking one consent box does not grant consent for the others. We process your phone number and per-channel consent records solely to operate this Program.
Service providers (data processors):
- Twilio Inc. — delivers our SMS messages, places voice calls on our behalf, and routes WhatsApp messages via the WhatsApp Business API.
- Meta Platforms Ireland Ltd — operates the WhatsApp Business API and processes WhatsApp message metadata as a sub-processor.
We do not sell, rent, or share mobile numbers, WhatsApp identifiers, or opt-in records with third parties or affiliates for any purpose.
You can revoke consent for any channel independently at any time:
- Reply STOP to any SMS or WhatsApp message;
- Tell our caller during any voice call, or email info@lumenix.ai with subject "STOP CALLS";
- Email info@lumenix.ai with subject "Unsubscribe from all communications" to revoke all three at once.
For UK voice calls, we additionally screen our outbound dial lists against the Telephone Preference Service (TPS) register before contacting you. See our Messaging & Calling Terms for full per-channel details.
6. Sharing Your Information
We share personal information only with trusted service providers who help us run our business, including:
- Twilio Inc. — SMS delivery, voice calls, and WhatsApp message routing;
- Meta Platforms Ireland Ltd — WhatsApp Business API, as a sub-processor for WhatsApp message metadata;
- Stripe — payment processing;
- Google Workspace — email and document hosting;
- Hosting providers — for our website infrastructure.
These providers are bound by contractual data-protection obligations and process information only as instructed by us. We may also disclose information when required by law or to protect our legal rights.
7. International Transfers
Some of our service providers are based outside the UK/EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or adequacy decisions.
8. Data Retention
We keep personal information only as long as necessary for the purposes described above. SMS, WhatsApp, and voice opt-in records are retained for as long as you remain subscribed plus a reasonable period thereafter to demonstrate compliance. Records related to invoicing and contracts are retained for at least 6 years to meet UK statutory requirements.
9. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate data;
- Request deletion (the "right to be forgotten");
- Restrict or object to processing;
- Data portability;
- Withdraw consent at any time;
- Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, email info@lumenix.ai.
10. Cookies
Our website uses essential cookies for site functionality. We may also use limited analytics cookies to understand how visitors interact with our site. You can control cookies through your browser settings.
11. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. No system is 100% secure, but we work to protect your information.
12. Children
Our services and communications program are not directed to children under 18. We do not knowingly collect data from children under 18.
13. Changes
We may update this Privacy Policy from time to time. The current version is always available on this page with the "Last updated" date.
14. Contact
For privacy-related questions, contact us at info@lumenix.ai or by post at 86–90 Paul Street, London, England, EC2A 4NE, United Kingdom.