Compliance Status
Privacy & Data Governance
Last Updated: 15 July 2026. Lumina Ad Group operates with absolute digital transparency, fully compliant with UK GDPR and the Data Protection Act 2018.
Our Commitment to Transparency
1. Data Collection Scope
We collect minimal personal data required to execute advertising campaigns, manage corporate accounts, and analyze media performance. This encompasses essential identity records (such as name and corporate email), technical data (including IP address and browser type), and interaction metrics from our digital properties. We do not harvest extraneous personal data or construct invasive profiles unrelated to our core commercial service offerings.
Governance Insight
We only collect what we absolutely need. We don't harvest irrelevant personal data or sell your information to third-party data brokers.
2. Legal Basis for Processing
In accordance with UK GDPR and equivalent global standards, our processing of personal data is lawful only if and to the extent that at least one of the following applies: Consent (where you have explicitly opted in), Contractual Necessity (where processing is required to deliver agreed agency services), Legal Obligation (compliance with applicable laws), or Legitimate Interests (pursued by us or a third party, provided those interests are not overridden by your fundamental rights).
Governance Insight
Every piece of data we process has a documented legal foundation. If we rely on your consent, you have the right to withdraw it instantly at any time.
3. Cookie & Tracking Policy
We deploy essential and analytics cookies to optimize ad delivery and monitor site performance. Users are presented with granular controls to manage preferences via our consent management platform upon first visit. No non-essential trackers are fired without explicit prior consent.
4. International Transfers
As a UK-based agency leveraging global technology partners, your data may occasionally be transferred outside the UK and European Economic Area (EEA). Whenever such transfers occur, we ensure a similar degree of protection is afforded by implementing specific safeguards, including Standard Contractual Clauses (SCCs) approved for use in the UK.
Governance Insight
If your data crosses borders, it retains UK-level protection. We never export your data to regions lacking adequate legal safeguards.
DIRECT CONTACT
Data Protection Officer
For formal inquiries, Subject Access Requests (SAR), or exercising your rights under the UK GDPR, you may contact our appointed Data Protection Officer directly.
Postal Address
Electronic Contact
Email: [email protected]
Response Timeframes
- Subject Access Requests (SAR): Processed within 30 days
- Data Deletion Requests: Processed within 30 days
- General Privacy Inquiries: Initial response within 48 hours
Secure Privacy Request
Request Received
Our Data Protection Officer will review your request and respond within the statutory timeframe.