Privacy Policy

Effective Date: November 1, 2025

Last Updated: November 20, 2025

At Luminos Arc, we recognize the importance of protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and the choices you have regarding your information. We are committed to maintaining transparency and giving you control over your data.

Contact Information:

Luminos Arc

Birger Jarlsgatan 57

113 56 Stockholm, Sweden

Email: [email protected]

Phone: +46 8 519 742 68

Information we collect

We collect information in several ways when you interact with our website and services. Understanding what we collect helps you make informed decisions about sharing your information.

Information you provide directly

When you use our contact forms, request information, or engage with our services, you may provide us with personal information including:

  • Name and contact details such as email address and phone number
  • Company or organization information when relevant to your inquiry
  • Message content and any details you include in communications with us
  • Information provided when you subscribe to updates or newsletters

Information collected automatically

When you visit our website, certain information is collected automatically through cookies and similar technologies:

  • Device information including browser type, operating system, and device identifiers
  • Usage data such as pages visited, time spent on pages, and navigation patterns
  • IP address and approximate geographic location
  • Referral source and search terms that led you to our website
  • Cookie data and similar tracking technologies (see our Cookie Policy for details)

Information from third parties

In some cases, we may receive information about you from third-party services we use, such as analytics providers, advertising platforms, or professional networking sites. This information helps us understand how you interact with our online presence across different platforms.

How we use your information

We use the information we collect for specific purposes that serve both your interests and ours. Here's how we use your data:

Service delivery and communication

Responding to your inquiries, providing information about our services, maintaining ongoing communications about projects or engagements, and delivering the services you request.

Website improvement and analytics

Understanding how visitors use our website, identifying technical issues, improving site functionality and user experience, and analyzing traffic patterns to optimize content.

Marketing and communications

Sending relevant information about our services, sharing insights or resources that may interest you, and maintaining relationships with current and prospective clients (with your consent where required).

Legal and security purposes

Complying with legal obligations, protecting against fraud or security threats, enforcing our terms and policies, and maintaining the integrity of our systems.

Business operations

Managing our business relationships, conducting internal research and development, maintaining business records, and supporting strategic decision-making.

Legal basis for processing

Under GDPR and similar data protection laws, we process your personal data based on the following legal grounds:

  • Consent: When you have explicitly agreed to our processing of your data for specific purposes, such as receiving marketing communications
  • Contract Performance: When processing is necessary to fulfill services you've requested or to take steps before entering into an agreement
  • Legitimate Interests: When we have a legitimate business interest in processing your data, such as improving our services or protecting against fraud, provided this doesn't override your rights
  • Legal Obligation: When we must process your data to comply with legal requirements or regulations

How we share your information

We do not sell your personal information. However, we may share your data with certain third parties in specific circumstances:

Service providers

We work with trusted third-party service providers who assist with website hosting, analytics, email communications, and other business operations. These providers are contractually obligated to protect your data and use it only for the purposes we specify.

Analytics and advertising partners

We may share anonymized or aggregated data with analytics providers like Google Analytics to understand website usage. With your consent, we may share data with advertising platforms to deliver relevant advertisements.

Legal requirements

We may disclose your information when required by law, legal process, or government requests, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal data.

Data security and protection

We implement reasonable security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

  • Encryption of data in transit using SSL/TLS protocols
  • Regular security assessments and updates to our systems
  • Access controls limiting who can view or use your data
  • Employee training on data protection and confidentiality
  • Secure backup and recovery procedures

While we strive to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but remain committed to maintaining industry-standard protections.

Data retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Retention periods vary based on data type and purpose:

  • Contact form submissions: Retained for up to two years or until you request deletion
  • Analytics data: Typically retained for 26 months in aggregated form
  • Marketing communications data: Retained until you unsubscribe or request deletion
  • Client project data: Retained according to contractual obligations and professional standards
  • Legal and compliance data: Retained as required by applicable laws and regulations

Your rights and choices

You have several rights regarding your personal information. We respect these rights and will respond to your requests in accordance with applicable law.

Right to access

You can request a copy of the personal information we hold about you. We will provide this information in a commonly used electronic format.

Right to rectification

If your personal information is inaccurate or incomplete, you have the right to request that we correct or update it.

Right to erasure

Also known as the "right to be forgotten," you can request that we delete your personal data in certain circumstances, such as when it's no longer necessary for the purposes it was collected.

Right to restriction of processing

You can ask us to limit how we use your data in certain situations, such as while we verify the accuracy of information you've contested.

Right to data portability

You have the right to receive your personal data in a structured, commonly used format and to transfer it to another service provider where technically feasible.

Right to object

You can object to our processing of your personal data based on legitimate interests or for direct marketing purposes. We will stop processing unless we have compelling legitimate grounds.

Right to withdraw consent

Where processing is based on consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within one month, though this may be extended by two months for complex requests.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

  • Avoid filling out contact forms, account registrations, or any data-submitting features
  • Disable cookies through your browser settings (see our Cookie Policy for more details)
  • Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided below. We will process your request promptly and in accordance with applicable data protection laws.

International data transfers

As we operate from Sweden and use service providers that may be located in different countries, your personal information may be transferred to and processed in countries outside the European Economic Area (EEA).

When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms. We maintain the same level of protection for your data regardless of where it is processed.

Children's privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child under 18, we will take steps to delete it as soon as possible. If you believe we may have collected information from a child, please contact us immediately.

Third-party websites and services

Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

When you click on links to external sites, you are leaving our website and are subject to the privacy and security policies of those sites.

Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this policy and may provide additional notice through our website or by email.

We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our services after changes have been posted constitutes your acceptance of the updated policy.

Supervisory authority

If you are located in the European Economic Area or United Kingdom, you have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data in accordance with the law.

In Sweden, the relevant authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten). You can find more information about filing a complaint on their website.

Contact us about privacy

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal information, please contact us:

Luminos Arc

Birger Jarlsgatan 57

113 56 Stockholm, Sweden

Email: [email protected]

Phone: +46 8 519 742 68

We will respond to your inquiries within a reasonable timeframe, typically within 30 days. For complex requests, we may need additional time but will keep you informed of our progress.