Privacy Policy

Last Updated: 8 June 2026

1. Introduction

Loka Luno ("we", "us", "our") is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you:

  • visit our website;

  • contact us;

  • engage our services;

  • receive marketing communications from us;

  • apply to work with us as a contractor or supplier;

  • or otherwise interact with our business.

We are committed to complying with applicable privacy and data protection laws, including:

  • the UK General Data Protection Regulation (UK GDPR);

  • the Data Protection Act 2018;

  • the EU General Data Protection Regulation (EU GDPR) where applicable;

  • applicable United States privacy laws;

  • and other relevant data protection legislation.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

Data Controller:

Loka Luno

Address:
27 Old Gloucester Street
London
England
WC1N 3AX

Email: info@lokaluno.com

Website: lokaluno.com

For the purposes of applicable data protection laws, Loka Luno acts as the data controller of personal information collected through its website and business activities.

3. Information We Collect

We may collect, store, and process the following categories of personal information.

Contact Information

  • name;

  • email address;

  • telephone number;

  • company name;

  • job title;

  • postal address.

Business Information

  • enquiry information;

  • project details;

  • service requirements;

  • communications and correspondence;

  • contractual information.

Technical Information

  • IP address;

  • browser type and version;

  • operating system;

  • device information;

  • referral sources;

  • session information;

  • website usage data.

Marketing Information

  • marketing preferences;

  • communication preferences;

  • newsletter subscriptions;

  • responses to campaigns and promotions.

Payment Information

Where relevant, we may collect:

  • billing addresses;

  • invoice details;

  • transaction records;

  • payment references.

We do not intentionally collect special category personal data unless voluntarily provided and required for a specific purpose.

4. How We Collect Information

We may collect information:

  • directly from you;

  • through contact forms on our website;

  • through email correspondence;

  • during meetings, calls, and consultations;

  • through service agreements;

  • through cookies and analytics tools;

  • through social media platforms;

  • through referrals;

  • through contractors and business partners;

  • and through publicly available business information.

5. How We Use Personal Information

We may use personal information to:

  • respond to enquiries;

  • provide and manage services;

  • deliver projects;

  • communicate with clients and prospective clients;

  • manage supplier and contractor relationships;

  • process payments and invoices;

  • maintain business records;

  • improve our website and services;

  • analyse website performance;

  • detect fraud and misuse;

  • enforce legal rights and agreements;

  • comply with legal obligations;

  • send marketing communications where permitted by law.

6. Lawful Bases for Processing

Where UK GDPR or EU GDPR applies, we rely on one or more of the following lawful bases.

Contract

Processing necessary to perform a contract or take steps prior to entering into a contract.

Legitimate Interests

Processing necessary for our legitimate business interests, including:

  • operating and growing our business;

  • managing client relationships;

  • improving our services;

  • maintaining website security;

  • preventing fraud;

  • managing suppliers and contractors.

Consent

Where required by law, we process personal information based on your consent.

Legal Obligation

Where processing is necessary to comply with legal obligations.

7. Marketing Communications

We may send marketing communications regarding our services where permitted by law.

You may opt out at any time by:

  • clicking the unsubscribe link in any marketing email;

  • contacting us directly at info@lokaluno.com;

  • requesting removal from our marketing database.

We will honour all valid opt-out requests in accordance with applicable law.

8. Cookies and Analytics

Our website may use cookies and similar technologies to:

  • ensure website functionality;

  • improve user experience;

  • analyse visitor behaviour;

  • measure website performance;

  • support marketing and advertising activities.

You may control cookies through your browser settings.

Where required by law, we will obtain consent before placing non-essential cookies on your device.

9. Sharing Personal Information

We may share personal information with:

  • employees;

  • contractors;

  • freelancers;

  • professional advisers;

  • accountants;

  • legal advisers;

  • hosting providers;

  • cloud software providers;

  • CRM providers;

  • analytics providers;

  • payment processors;

  • marketing and advertising platforms;

  • government authorities where required by law.

All third parties are expected to maintain appropriate security and confidentiality standards.

We do not sell personal information.

10. International Data Transfers

As a UK-based business serving international clients and working with international contractors and suppliers, personal information may be transferred outside the United Kingdom or European Economic Area.

Where such transfers occur, we take reasonable steps to ensure appropriate safeguards are in place, including:

  • adequacy regulations;

  • standard contractual clauses;

  • contractual safeguards;

  • or other lawful transfer mechanisms.

11. Contractors and Service Providers

Loka Luno may engage contractors, freelancers, and service providers located outside the United Kingdom, including within the European Union, India, and the United States.

Where contractors or service providers have access to personal information, they are contractually required to:

  • maintain confidentiality;

  • protect personal information;

  • use information only for authorised purposes;

  • implement reasonable security measures;

  • comply with applicable privacy and data protection obligations.

12. Data Retention

We retain personal information only for as long as reasonably necessary to:

  • provide services;

  • fulfil contractual obligations;

  • maintain business records;

  • comply with legal obligations;

  • resolve disputes;

  • enforce agreements;

  • protect our legitimate business interests.

Retention periods may vary depending on the type of information and applicable legal requirements.

13. Data Security

We take reasonable technical and organisational measures to protect personal information from:

  • unauthorised access;

  • accidental loss;

  • misuse;

  • disclosure;

  • alteration;

  • destruction.

These measures may include:

  • password protection;

  • secure cloud storage;

  • restricted access controls;

  • encrypted services where appropriate;

  • contractor confidentiality obligations.

While we take reasonable steps to protect personal information, no system can guarantee complete security.

14. Your Rights

Depending on your location and applicable law, you may have rights including:

  • the right to access personal information;

  • the right to correct inaccurate information;

  • the right to request deletion of information;

  • the right to restrict processing;

  • the right to object to processing;

  • the right to data portability;

  • the right to withdraw consent;

  • the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us at info@lokaluno.com.

15. Additional Rights for UK and EU Residents

Individuals located in the United Kingdom or European Union may have additional rights under applicable data protection legislation.

UK residents may submit complaints to the Information Commissioner's Office (ICO).

Nothing in this Privacy Policy limits any statutory rights available under applicable data protection laws.

16. Additional Rights for US Residents

Residents of certain US states may have additional privacy rights, including rights relating to:

  • access;

  • deletion;

  • correction;

  • portability;

  • and opting out of certain data processing activities where required by law.

Where applicable, we will comply with relevant state privacy legislation.

17. Children's Privacy

Our services are intended for businesses and individuals aged 18 years or older.

We do not knowingly collect personal information from children under the age of 13.

If we become aware that personal information from a child has been collected inadvertently, we will take reasonable steps to delete it.

18. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices, content, or security of external websites.

Users should review the privacy policies of any third-party websites they visit.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be published on this page and become effective immediately upon publication unless otherwise stated.

We encourage users to review this Privacy Policy periodically.

20. Contact Us

For questions regarding this Privacy Policy or our handling of personal information, please contact:

Loka Luno

27 Old Gloucester Street
London
England
WC1N 3AX

Email: info@lokaluno.com

Website: lokaluno.com