Privacy policy
Last updated: 26 October 2026
This policy explains how personal data is collected and used when you visit the Lumialending website, request early access or contact us. Lumialending is a product owned and operated by Lumiatech Solutions Ltd ("Lumiatech", "we", "us").
1. Who we are
The data controller is Lumiatech Solutions Ltd, a company registered in England and Wales under company number 15824974, with its registered office at 320 Firecrest Court, Centre Park, Warrington, WA1 1RG, United Kingdom. Lumiatech operates from London, United Kingdom and Madrid, Spain.
For any privacy question or request, contact us at info@lumiatech.io.
2. What we collect
- Early-access requests: your name, work email, company, type of lending and approximate monthly loan volume.
- Communications: what you send us by email, calls or meetings, and our replies.
- Technical data: IP address, browser type, device information and pages viewed, collected automatically by our hosting and font providers to deliver the site securely.
We do not ask for sensitive personal data on this website, and we do not knowingly collect data from anyone under 18.
3. How we use it, and why we are allowed to
- To respond to your early-access request, arrange demos and discuss a possible engagement. Lawful basis: steps taken at your request before entering a contract, and our legitimate interest in developing business relationships.
- To send occasional product updates to business contacts. Lawful basis: legitimate interest, or consent where the law requires it. You can opt out at any time.
- To keep the website secure, working and improving. Lawful basis: legitimate interest.
- To meet legal, tax and regulatory obligations. Lawful basis: legal obligation.
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
4. Who we share it with
We share personal data only with trusted service providers who help us run our business, such as website hosting, cloud infrastructure, email and CRM providers. They act on our instructions and under contracts that protect your data. We may also disclose data where required by law or to protect our legal rights.
5. International transfers
Some of our providers are based outside the UK or the European Economic Area, including in the United States. Where this happens, we rely on adequacy decisions or approved safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.
6. How long we keep it
We keep early-access and contact data for up to 24 months after our last interaction, unless we start working together, in which case our contract terms apply. Records we must keep for legal or tax reasons are kept for the period the law requires.
7. Data processed in the Lumialending platform
When a lender uses the Lumialending platform, the borrower and loan data it uploads is processed on that lender's behalf under our customer agreement and data processing terms. For that data, the lender is the controller and Lumiatech acts as processor. This website policy does not cover that processing.
8. Your rights
Under UK and EU data protection law you can ask to access, correct or delete your personal data, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. To make a request, email info@lumiatech.io. We will reply within one month.
You can also complain to a supervisory authority: the Information Commissioner's Office (ICO) in the UK, or the Agencia Española de Protección de Datos (AEPD) in Spain. We would appreciate the chance to resolve your concern first.
9. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and least-privilege access for our team and providers.
10. Cookies
How we use cookies and similar technologies is explained in our cookie policy.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.