Privacy Notice

1. Controller

Lumenoeva (Private) Limited
Company No. PV00304614
Palli Wasalpaduwa, Kottantivu, Sri Lanka 61252
info@lumenoeva.com

2. Data we may collect

Depending on how you interact with Lumenoeva, we may process business contact details, correspondence, workflow descriptions, company information, technical website logs, IP/device information required for security and delivery, and information submitted through forms. Customer operational data processed under a managed-service agreement is governed primarily by the relevant contract, DPA and service documentation.

3. Why we process data

We use personal data to operate and secure the website; respond to enquiries; assess workflows; prepare commercial proposals and contracts; configure and deliver managed services; maintain business records; protect legal rights; and comply with applicable law. Where GDPR applies, the relevant legal basis may include steps requested before entering a contract, performance of a contract, legitimate interests, legal obligations and consent where required.

4. Workflow submissions

Information submitted through “Give us a workflow” is sent to Lumenoeva for business assessment. Do not submit production customer records, credentials, API keys, confidential datasets or unnecessary sensitive personal data through the public enquiry form. Secure production access and customer-data processing arrangements are established separately after workflow qualification. A workflow description may be retained as part of the commercial assessment, proposal or customer record if the discussion progresses.

5. Service providers and subprocessors

We use service providers for website hosting, communications and other technical functions. Managed customer workflows may also use approved AI, data, integration or infrastructure providers. Relevant customer subprocessors are documented according to the applicable service arrangement. See our Subprocessors and AI & Data Use pages.

6. International transfers

Lumenoeva is established in Sri Lanka and serves international business relationships. Where an EU/EEA processing relationship requires GDPR processor terms, those terms are established for the applicable customer service. Where personal data is transferred outside the EEA and GDPR Chapter V safeguards are required, an applicable transfer mechanism is established before the relevant processing begins. Depending on the relationship, this may include the European Commission’s Standard Contractual Clauses together with supplementary safeguards where appropriate. Sri Lanka is not currently covered by a general European Commission adequacy decision.

7. Retention

We retain personal data only for as long as needed for the purpose for which it was collected, to maintain necessary business and security records, to meet contractual or legal requirements, and to establish or defend legal claims. Customer-workflow retention is defined in the applicable service and data-processing documentation.

8. Security

We use technical and organisational measures appropriate to the data and workflow, including access controls, server-side credential handling, client separation, auditability and controlled operational procedures. No internet service can guarantee absolute security.

9. Your rights

Depending on applicable law and your relationship with Lumenoeva, you may have rights to request access, correction, deletion, restriction, objection, portability or withdrawal of consent, and to complain to a competent data-protection authority. Requests can be sent to info@lumenoeva.com.

10. Cookies and local storage

The website may use strictly necessary cookies or similar technical storage for WordPress functionality, security, session handling and performance. Lumenoeva does not use behavioural advertising cookies. If non-essential analytics or similar technologies are introduced, consent controls will be applied where required by law. See the Cookie Notice.

11. Changes

We may update this notice when the website, service architecture or legal requirements change. The current version will be published here.

Last updated: 6 September 2026.