Privacy notice
1. Controller
Luellux (sole trader), Finnish Business ID 3431743-6, Helsinki, Finland. Privacy matters: hello@luellux.fi.
2. What we process
- Contact form and email: name, email address, industry or company, whether you already have a website, colour preference, timeline, budget range and free message, in other words only what you write yourself.
- Visitor statistics: Cloudflare Web Analytics collects aggregated, anonymous data (such as page views, country, browser type and load speed). It uses no cookies and does not identify individual visitors.
- Technical logs: the web server (Cloudflare) processes IP addresses and browser details to deliver the page and keep it secure.
3. Purpose and legal basis
- Answering your enquiry and preparing a quote: steps taken at your request before a contract (GDPR Art. 6(1)(b)).
- Running the site, security and anonymous statistics: legitimate interest (Art. 6(1)(f)).
- If the enquiry leads to a client relationship, invoicing and bookkeeping records are kept as required by law (Art. 6(1)(c)).
Data is not used for automated decision-making, profiling or advertising, and it is never sold.
4. Where the data goes
The form sends your details by email to hello@luellux.fi, either by opening your own email app or through the server. We use these service providers as processors:
- Cloudflare: web hosting and visitor statistics.
- ImprovMX and Google (Gmail): email forwarding and storage.
Some providers may process data outside the EU/EEA. Such transfers rely on the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework.
5. How long data is kept
Enquiries are kept for up to 24 months after the last contact if no work follows. Bookkeeping records for clients are kept for the period required by Finnish accounting law. Anonymous statistics contain no personal data.
6. Cookies and browser storage
The site sets no cookies, so no cookie banner is needed. Only two things are stored in your browser's local storage, both caused by your own actions and kept on your own device only:
luellux-palette: a colour accent, if you pick one in the colour picker.- Form draft: an unfinished form is kept for up to 7 days so you don't lose what you wrote. You can remove it with the Clear draft button.
Neither is sent to a server until you submit the form yourself. Fonts are served from this site's own server, not from Google.
7. Your rights
You have the right to access, correct and delete your data, to restrict or object to processing, and to data portability. Send requests to hello@luellux.fi; we reply within one month. You can also lodge a complaint with the Finnish supervisory authority, the Data Protection Ombudsman.
8. When we handle our clients' data for them
In our automation services (for example quote forms, reference pages and Google Business Profile care) we process personal data on behalf of our client businesses. In that case the controller is the business whose website or service you are using, and Luellux is its processor. We process the data only on the client's instructions and under a written data processing agreement, never for our own purposes. Access and deletion requests should go to that business, and we forward any we receive without delay. AI writes drafts, and the client business approves them before anything is sent or published.
9. Competitor map reports
We prepare competitor analyses for our clients from public sources such as company websites, price lists, business registers and public reviews. The controller is Luellux. For sole traders we only process public information about their business, never their private life. The legal basis is legitimate interest. Working material is deleted within six months of delivery. You can object or ask for access, correction or deletion at hello@luellux.fi.
10. Changes
We update this notice if our processing changes. Last updated 2026-09-25.