Privacy Policy

Our commitment to your privacy

Lumex Arc Bridge is committed to handling any personal information you share with us responsibly and in line with applicable data protection laws, including the Act on the Protection of Personal Information (APPI) and the General Data Protection Regulation (GDPR) where relevant. This policy explains what data we collect, why we collect it, how it is used, and the choices available to you.

1. Data we collect

• —Contact form submissions: When you use our contact form, we collect your name, email address, optional subject line, and message content.
• —Analytics data: If you have consented to analytics cookies, we collect anonymised data on page visits, referral sources, and general browsing patterns through third-party analytics tools.
• —Cookie preferences: Your cookie consent choices are stored locally in your browser's localStorage and are not transmitted to any external server.
• —Device and browser data: Standard web server logs may capture your IP address and browser type when you access the site.

2. How we use your data

• —To respond to enquiries and appointment requests submitted through the contact form.
• —To analyse how the website is used so we can make improvements that benefit visitors.
• —To comply with legal obligations where applicable.
• —We do not sell, rent, or trade your personal data with third parties for their own marketing purposes.

3. Legal basis for processing

• —Consent: For cookies and analytics, we rely on your freely given consent, which you can withdraw at any time.
• —Legitimate interests: For responding to your enquiries and maintaining secure website operation.
• —Legal obligation: Where data processing is necessary to comply with applicable law.

4. Data sharing and third parties

• —Analytics data may be processed by Google Analytics where you have consented to analytics cookies.
• —Advertising data may be shared with Google's advertising network where consent has been given for advertising cookies.
• —We do not share contact form submissions with third parties outside of the purpose for which they were submitted.

5. Data retention

Contact form submissions are retained only as long as necessary to address your enquiry and for a reasonable period afterwards in case of follow-up. Analytics data is aggregated and anonymised. Cookie preferences stored in localStorage remain on your device until you clear your browser storage or change your preferences.

6. Security measures

• —Our website is served over an encrypted HTTPS connection.
• —Access to any submitted contact data is restricted to authorised clinic staff.
• —In the event of a data breach that poses a risk to your rights and freedoms, we will notify relevant authorities and affected individuals as required by law.

7. Your rights

• —Access: You may request a copy of the personal data we hold about you.
• —Rectification: You may ask us to correct inaccurate or incomplete data.
• —Erasure: You may request that we delete your personal data, subject to any legal obligations to retain it.
• —Portability: Where technically feasible, you may request your data in a structured, machine-readable format.
• —Objection: You may object to processing based on legitimate interests.
• —Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.