headluma takes the protection of your personal data seriously. This page describes which data we process on headluma.com, for which purposes and which rights the UK GDPR and the Data Protection Act 2018 give you. It applies to everyone who visits the website and to people who contact us by email or through the contact form.
Controller and scope of this policy
headluma, established at 14 Wind Street Yard, Swansea SA1 1DP, United Kingdom, is responsible for the processing of personal data on headluma.com. For questions about data protection, write to [email protected] or call 01792 410286. The notice covers this website as a whole, including the messages that reach us through it.
How long we keep data
We keep personal data only as long as it is needed for the purpose it was collected for, or as long as statutory retention periods require. After that it is deleted or the reference to a person is removed.
Technical log entries are deleted automatically after a short time. Enquiries and the correspondence that follows are kept while they may still be needed, and documents covered by tax or commercial law for the statutory period.
Security of processing
We use technical and organisational measures to protect the data we hold against loss, manipulation and access by unauthorised people. The connection to this website is encrypted where your browser supports it.
Even with careful protection, sending data over open networks is never free of risk, and we do not promise complete security. Within our company, only the people handling your request can see your messages.
Data processed on this website
Opening this website leaves a few technical traces with our hosting provider: the address of your device, the moment of the visit, the page opened and basic details about the browser. We use them only to run the site safely and to find the cause of technical errors.
Messages sent through the contact form or by email, together with your name, the address we should reply to and any details you add yourself, are kept for as long as it takes to handle the matter you wrote about.
Cookies
This website keeps stored entries to a minimum. It does not use advertising cookies, it does not follow visitors across other sites, and an answer you give to a cookie notice stays in your own browser.
You can see which entries this website has stored, delete them and refuse new ones at any time in the settings of your browser. Blocking storage that the pages need may mean that parts of the site no longer work.
Third parties and transfers
We do not sell personal data. It is shared only with the providers who host this website and handle our email, acting on our instructions under a data processing agreement, and with authorities where the law obliges us.
If a provider operates servers or support staff abroad, data may leave the country in which we are established. We work only with providers who commit to the level of protection that the applicable law requires for such transfers.
Why we process data
The processing serves the operation and security of headluma.com, the handling of the requests you send us, the preparation of offers and the fulfilment of duties that arise from a contract or from the law.
Where the law requires a legal ground, we rely on your consent, on a contract or the steps preceding it, on an obligation imposed on us, or on our legitimate interest in operating this site safely. Providing data is voluntary, but an enquiry without contact details cannot be answered.
Your rights
You can ask us at any time which data we store about you, request its correction or deletion, have the processing restricted, object to it or receive a copy in a common electronic format. Consent that you have given may be withdrawn at any time; the withdrawal applies from then on.
To exercise any of these rights, a message to [email protected] is enough. To be sure that we are dealing with the right person, we may ask you to confirm your identity; our answer follows within the statutory period and is free of charge.
Besides contacting us, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.