Privacy Policy

1. Scope

This policy explains how LUXGroupConsulting OÜ (“LUX”, “we”, “us”) processes personal data when you visit luxgroup.club, submit an access request, contact us, or otherwise interact with our services.

2. Data we collect

• Identity and contact data, including your name and business email.
• Information you choose to include in an inquiry or subsequent correspondence.
• Technical data such as IP address, device and browser information, timestamps, pages viewed, security logs, and cookie preferences.
• Business relationship and engagement records where you become a client, partner, or supplier.

3. Purposes and legal bases

We process data to respond to inquiries and take pre-contractual steps; operate, secure, and improve the website based on our legitimate interests; comply with legal obligations; and, where required, use analytics or other non-essential technologies only with your consent. You may withdraw consent at any time without affecting prior lawful processing.

4. Forms and service providers

Website forms and hosting are provided through Webflow. We may also use carefully selected infrastructure, communications, security, and analytics providers acting under appropriate data-processing terms. Where data is transferred outside the European Economic Area, we use a lawful transfer mechanism and appropriate safeguards.

5. Cookies and analytics

Strictly necessary technologies may operate to deliver and secure the site. Non-essential analytics or similar technologies will be activated only after a valid opt-in where consent is legally required. See our Cookie Policy for details.

6. Retention

Inquiry data is normally retained for up to 24 months after the last meaningful contact, unless a business relationship begins or a longer period is required to establish, exercise, or defend legal claims or meet legal obligations. Technical logs and consent records are kept only for as long as reasonably necessary for security, compliance, and evidence of preferences.

7. Sharing

We do not sell personal data. We disclose it only to authorized personnel, contracted service providers, professional advisers, or competent authorities when necessary and lawful.

8. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may also withdraw consent and lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or another competent supervisory authority. Send requests to kristian@luxgroup.club. We may need to verify your identity.

9. Security

We apply proportionate technical and organizational safeguards designed to protect personal data. No internet transmission or storage method is completely secure, so absolute security cannot be guaranteed.

10. Updates and contact

We may update this policy when our practices or legal requirements change. The date above identifies the current version. Questions may be sent to kristian@luxgroup.club.