Privacy Policy
General
Protecting your personal data is a priority for us. This Privacy Policy explain how Stomio ltd, owned website Lumoral.co.uk,
This Privacy Policy does not apply to third parties who may process your data.
1. Data Controller
Stomio limited
110 Butterfield Great Marlings
Luton Bedfordshire
LU28DL
2. Contact details
3. Registry name
Stomio Ltd
4. Purpose and legal basis for processing
personal data
One-time customers are customers who make purchases from the data controller's online store without authentication. The data of one-time customers is processed for the following purposes and legal bases:
Fulfilment of one-time customer orders, e.g., delivery and monitoring of products and services, execution of payments, invoicing, and collection.
Development and improvement of products and services.
Pursuant to the data controller's legitimate interests, information other than the purchased product may be used for customer satisfaction, opinion, and market
research.
With the consent of the one-time customer, usage data collected through cookies or similar methods are used to personalise online service advertising and functionality.
The following information is recorded in the customer registry for one-time customers: details of the purchase and payment transactions; information necessary for the delivery and tracking of products, as well as information necessary for customer satisfaction and other research, e.g., name, address, email address, phone number, and usage data collected through cookies or
similar methods, such as browsing history and the customer's device IP address and other technical details.
Personal data is processed to provide agreed-upon services and manage customer relationships. The purpose is to manage and maintain the customer relationship between stomio ltd and the customer, fulfill orders, such as delivering products and services, monitoring deliveries, executing payments, invoicing, and collection-related matters, as well as marketing. Information may be used for business development and statistics. Direct marketing related to the customer relationship may be sent to registered individuals. The registered individual has the right to refuse direct marketing. After the termination of the customer relationship, the data may be transferred to the data controller's direct marketing registry. Data processing is outsourced to the data controller's accounting firm as needed to organise the data controller's financial management and, especially, billing.
The legal basis for processing personal data is the company's legitimate interest, contracts related to customer relationships, individuals' consent, and legal obligation.
Stomio Ltd must process certain information in order to comply with its legal obligations in different countries. These obligations may relate, for example, to consumer protection or tax laws and medical device regulation and its requirements.
5. Content of the registry
The registry includes the following identification data: name, phone number, email address and profession/title. In addition, the registry may contain information about the company where the person works, such as the company name, business ID, and address. Furthermore, the registry may contain information about ordered services and products and their billing.
6. Retention period of personal data
The lifecycle of your relationship with us usually determines the retention period of your personal data. Your personal data will be deleted when it is no longer needed for the purpose for which it was originally collected, unless we have a legal obligation to retain it for longer.
Stomio Ltd also has legal obligations to retain certain personal data for a specified period of time, for example for tax purposes. Retention period requirements may relate to, for example, accounting or tax purposes, legal requirements or other legal purposes. Please note that mandatory retention periods for personal data vary depending on the applicable law.
If you wish, you can request the deletion of your customer data and account by
contacting support@lumoral.co.uk
7. Regular sources of information
The contact and customer information contained in the registry is regularly obtained directly from the customer during registration or order placement. Information can also be received in connection with meetings, email, chat, contact forms, inquiries, or from within the company.
Basic information: last name, first names, address, and other contact information, language of communication
Information necessary for managing the customer relationship
Information related to customer contracts, orders, purchased products and services, delivery, and payments, including the purchase history of products
Usage data from newsletters, mobile applications, online and other services
Customer-declared areas of interest Customer's total purchase amount and other customer benefits
With the customer's consent, usage data, such as browsing history, is collected through cookies or similar methods, as well as the customer's device IP address and other technical details from Lumoral online store and services.
Information about offers, feedback, and other communication with the customer
Customer's consent, permissions, prohibitions, and authorizations
8. Principles of registry protection
Manual materials are kept in a locked space at the company's premises. Data processed by IT is protected with a password on the computer network, and access to registry data is only granted to the data controller and specifically designated technical personnel. Only designated individuals have the right to process and maintain registry data. Users are bound by confidentiality.
9. Right of access to information
Every individual in the registry has the right to check the information stored about them in the registry and request correction of any incorrect information or supplementation of incomplete information. If a person wants to check the information stored about them or request corrections, the request must be sent in writing to the data controller. The data controller may, if necessary, request the requester to prove their identity. The data controller will respond to the customer within the time (usually within a month).
10.Other rights related to the processing of
personal data
Individuals in the registry have the right to request the deletion of their personal data from the registry ("right to be forgotten"). Likewise, registered individuals have other rights under the EU General Data Protection Regulation, such as restricting the processing of personal data in certain situations. Requests should be sent in writing to the data controller. If necessary, The data controller may request the requester prove their identity. The data controller will respond to the customer within the time frame (usually within a month).
13. Use of Cookies
We use cookies and many other technologies to collect and store information when customers use our site, and for personalisation and advertising purposes. We use both first and third party cookies.
Cookies are small text files that are sent to and stored on your device. They allow us to identify visitors to our site, facilitate their use of the site and collect information about visitors. Cookies help us to improve our service and customer support and do not harm your device or your files. We use cookies and similar technologies to tailor our site and the information we provide to our customers based on their individual interests. Cookies are also used to track browsing habits and to target and optimise advertising, both on our own site and on other sites you may visit. We also use cookies and similar technologies to integrate our social media accounts into our site.
For more information about Stomio Ltd use of cookies and how to manage your cookie settings, please see our Cookie Policy.
14. Changes to this privacy policy
We reserve the right to update this Privacy Policy occasionally at our sole discretion. If you continue to use the stomio Ltd websites or services, following a change, your continued use will constitute your acceptance of the change.