Privacy Policy — lumeons

lumeons ("we", "us", "our") is committed to handling personal data responsibly and transparently. This Privacy Policy explains what personal information we collect when you use our website at lumeons.live or engage our advisory services, how we use that information, and what rights you have in relation to it. We operate from Jalan PJU 7/3, 47810 Petaling Jaya, Selangor, Malaysia.

1. Scope of This Policy

This policy applies to personal data collected through our website, via our contact form, during client engagements, and through email or telephone communications. It does not extend to third-party websites linked from our site.

2. What Personal Data We Collect

We may collect the following categories of personal data:

Contact details: name, email address, phone number
Enquiry information: project descriptions and messages submitted through our contact form
Engagement information: details relevant to advisory engagements, including site information you share with us
Technical data: IP address, browser type, pages visited — collected via analytics cookies where consent is given

3. How We Collect Personal Data

Directly from you via the contact form on this website
Through email or telephone correspondence
During the course of an engagement when you share project-related information
Via analytics tools when you browse our website (subject to cookie consent)

4. Legal Basis for Processing

We process personal data under the following legal bases as recognised under Malaysia's Personal Data Protection Act 2010 (PDPA):

Consent: Where you have given explicit consent, for example by submitting the contact form or accepting analytics cookies
Contractual necessity: Where processing is required to deliver an advisory engagement you have requested
Legitimate interests: For example, maintaining records of past engagements to improve service delivery

5. How We Use Personal Data

To respond to enquiries submitted through the contact form
To scope, deliver, and document advisory engagements
To issue invoices and manage client records
To communicate relevant updates about our services (where you have consented)
To understand how our website is used and improve its content (analytics, where consented)

6. Data Sharing

We do not sell personal data. We may share data with the following categories of party only where necessary:

Analytics providers: such as Google Analytics, subject to their own privacy policies, where you have consented to analytics cookies
Email and cloud storage providers: used to store correspondence and engagement documents
Legal and regulatory authorities: where disclosure is required by Malaysian law

Client site information and planning documents shared during engagements are not shared between client accounts.

7. Data Retention

Enquiry data: retained for 12 months if no engagement results; retained for the duration of the engagement plus 24 months if an engagement proceeds
Engagement records: retained for 5 years for business record purposes
Analytics data: subject to the retention policy of the analytics provider; typically 14 to 26 months

8. Data Protection Measures

Access to client data is restricted to team members who require it for the engagement
Electronic documents are stored on access-controlled cloud services
We do not store payment card data; invoicing uses standard business banking channels

9. Cookies

Our website uses cookies. Details of the types of cookies used, their purposes, and how to manage your preferences are set out in our Cookie Policy.

10. Your Rights Under PDPA

Under the Personal Data Protection Act 2010, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate or incomplete personal data
Request that we cease processing your personal data for direct marketing
Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. Please review their privacy policies independently.

12. Children's Privacy

Our services are directed at business professionals aged 18 and over. We do not knowingly collect personal data from individuals under 18.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when the policy was last reviewed. Continued use of our website or services after any update constitutes acknowledgement of the revised policy.

14. Contact

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Email: [email protected]
Address: Jalan PJU 7/3, 47810 Petaling Jaya, Selangor, Malaysia
Phone: +60 3-7913 6840