Privacy policy

Luellux (sole trader), Finnish business ID 3431743-6, Helsinki. Privacy matters: [email protected].

• Contact form and email: name, email address, industry or company, information about your current website, colour preference, schedule, budget range and free-text message, meaning only what you write yourself.
• Visitor statistics: Cloudflare Web Analytics collects aggregated, anonymous data (e.g. page load counts, country, browser type and loading speed). It uses no cookies and does not identify individual visitors.
• Technical log data: the site's server (Cloudflare) processes your IP address and browser details to deliver the page and for security.

• Replying to your enquiry and preparing a quote: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)).
• Running the site, security, anonymous visitor statistics and improving the site with Clarity: legitimate interest (Art. 6(1)(f)).
• If your enquiry results in a customer relationship, invoicing and accounting data are kept as required by law (Art. 6(1)(c)).

The data is not used for automated decision-making, profiling or advertising, and it is never sold to anyone.

The form sends the data as email to [email protected], either by opening your own email program or through the server. We use the following service providers as processors of personal data:

• Cloudflare: the site's server and visitor statistics.
• ImprovMX and Google (Gmail): email forwarding and storage.

Some service providers may process data outside the EU/EEA. Such transfers are based on standard contractual clauses approved by the European Commission or on the EU-U.S. Data Privacy Framework.

Contact messages are kept for at most 24 months from the last contact if no cooperation follows. Accounting records related to a customer relationship are kept for the period required by the Finnish Accounting Act. Anonymous visitor statistics contain no personal data.

The site uses Microsoft Clarity, which stores anonymous session recordings and heatmaps to improve the site. It sets cookies (_clck, _clsk, kept for at most 13 months) and starts as soon as you open the page. The data is processed by Microsoft Ireland Operations Ltd; text typed into forms is masked in the recordings. You can block it with your browser's cookie settings or a content-blocking extension, or ask for your data to be deleted at [email protected].

The “Got it” button in the notice bar only stores in your browser the fact that you have seen the notice. Fonts are loaded from the site's own server, not from Google.

You have the right to access your data, correct it, request its deletion, restrict or object to processing, and transfer the data to another system. Send requests to [email protected]; we reply within one month. You can also lodge a complaint with the supervisory authority: Office of the Data Protection Ombudsman (Finland).

In our automation services (for example quote forms, reference pages and Google Business Profile maintenance) we process personal data on behalf of our client company. In that case the data controller is the company whose website or service you are using, and Luellux is its processor of personal data. We process the data only according to the client's instructions and a written data processing agreement, not for our own purposes. Requests to access or delete data are best sent to that company, and we forward any requests we receive to it without delay. AI prepares drafts, and the client company approves them before anything is sent or published.

We prepare competitor reviews for our clients from public sources, such as company websites, price lists, business registers and public reviews. The data controller is Luellux. For sole traders we process only public information about their business, not their private life. The legal basis is legitimate interest. Working material is deleted within six months of delivery. You can object to the processing or ask to access, correct or delete your data at [email protected].

We update this policy if the processing changes. Last updated 8 October 2026.