Privacy Policy

Introduction
Luma Health ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with our website and services, in accordance with the General Data Protection Regulation (GDPR) and other applicable Irish data protection laws.

  1. Data Controller
    Luma Health is the data controller for your personal data. If you have any questions or concerns about how we process your data, please contact us using the details provided in Section 11.

  2. Personal Data We Collect
    We collect the following types of personal data:

    • Contact Information: Name, email address, postal address, and telephone number.

    • Account Details: Username, password, and other relevant account information.

    • Health Information: Medical history and fertility-related details relevant to your treatment.

    • Payment Information: Credit/debit card details, billing address, and payment history.

    • Usage Data: Information about how you use our website, including IP address, browser type, and referring URL.

    • Other Information: Any other data you voluntarily provide when filling out forms or communicating with us.

  3. Legal Basis for Processing
    We process your personal data based on the following legal grounds:

    • Consent: When you provide explicit consent (e.g., by checking a box on our form).

    • Contractual Necessity: To perform our contractual obligations to you.

    • Legal Obligation: To comply with legal and regulatory requirements.

    • Legitimate Interests: When processing is necessary for our legitimate interests, provided your rights are not overridden.

  4. How We Use Your Data
    Your personal data may be used for the following purposes:

    • Provide and improve our services.

    • Communicate with you regarding updates, offers, and news.

    • Process transactions and manage your account.

    • Comply with legal and regulatory obligations.

    • Analyze website usage and trends to enhance user experience.

    • To manage appointments, treatments, and follow-ups.

    • To process payments and manage billing.

    • To improve our services and offer you relevant updates or promotions (with your consent).

  5. Data Sharing and Third Parties
    We do not sell your personal data. We may share your data with:

    • Service Providers: Third-party vendors who help us operate our website or conduct our business, under strict contractual obligations.

    • Legal Authorities: When required to comply with a legal obligation or to protect our rights.

    • Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred as part of the transaction.

    • Trusted Partners: We may share your information with trusted partners or service providers who assist us in delivering our services, such as payment processors or healthcare providers, under strict confidentiality agreements.

  6. Data Security and Retention
    We implement appropriate technical and organizational measures to protect your data against unauthorized access, disclosure, or loss. We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal requirements.

  7. Your Rights
    Under the GDPR, you have the following rights regarding your personal data:

    • Access: You can request a copy of the data we hold about you.

    • Correction: You can request corrections to any inaccurate or incomplete data.

    • Deletion: You can request the deletion of your data, subject to legal obligations.

    • Object: You can object to the processing of your data for marketing or profiling purposes.

    • Restrict Processing: You have the right to restrict processing in certain circumstances.

    • Data Portability: You can request the transfer of your data to another service provider.

    • Withdraw Consent: You have the right to withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

  8. International Data Transfers
    If your personal data is transferred outside the European Economic Area (EEA), we ensure that it is protected in accordance with the GDPR by using appropriate safeguards.

  9. Cookies
    We use cookies on our website to enhance your user experience and gather data on website usage. You can control cookie settings through your browser.

  10. Changes to This Privacy Policy
    We may update this Privacy Policy from time to time. Any updates will be posted on this page, and where appropriate, notified to you via email. Please review this policy periodically to stay informed on how we are protecting your personal data.

  11. Contact Us
    If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at:

    Email: hello@luma.ie