Introduction
Lunar-Burst ("we", "us", or "our") is committed to protecting the privacy of everyone who interacts with our business. This Privacy Policy describes how we collect and process personal data when you use our website, engage our services, or communicate with us.
We are the data controller for the personal information we process. Our registered address is 47 Castle Boulevard, Nottingham, NG7 1FE, United Kingdom.
Information We Collect
The personal information we collect depends on how you interact with us:
Information You Provide Directly
- Contact details such as your name, email address, and postal address
- Financial information relevant to the services you engage us for, including income details, expense records, pension statements, and debt information
- Business information if you are a business client, such as company name, turnover figures, and trading history
- Communication records including emails, meeting notes, and consultation records
Information Collected Automatically
When you visit our website, we may automatically collect:
- Technical data including your IP address, browser type, operating system, and device information
- Usage data such as pages visited, time spent on pages, and navigation paths
- Cookie data as described in our Cookies Policy
How We Use Your Information
We process your personal data for the following purposes:
- To provide the financial management services you have requested
- To communicate with you about your enquiries and appointments
- To send you relevant information about our services where you have consented
- To improve our website and services based on how visitors use them
- To comply with legal and regulatory obligations
- To protect our legitimate business interests
Legal Basis for Processing
We rely on the following legal grounds to process your personal information:
- Contract: Processing necessary to fulfil our contractual obligations to you when you engage our services
- Consent: Where you have given explicit consent, such as subscribing to communications
- Legitimate interests: Processing necessary for our legitimate business interests, provided these do not override your rights
- Legal obligation: Processing required to comply with applicable laws and regulations
Data Sharing
We do not sell your personal information. We may share your data with:
- Service providers who assist our operations, such as IT support and cloud storage providers, under strict confidentiality agreements
- Professional advisors including lawyers and accountants when necessary
- Regulatory bodies or law enforcement when required by law
- Third parties with your explicit consent
We require all third parties to respect the security of your data and treat it in accordance with applicable law.
Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected. Specifically:
- Client records are retained for seven years after the end of our business relationship, as required for professional and regulatory purposes
- Marketing preferences are retained until you withdraw consent
- Website analytics data is retained for 26 months
Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of sensitive data in transit and at rest
- Access controls limiting who can view personal information
- Regular security assessments and updates
- Staff training on data protection practices
Your Rights
Under data protection law, you have rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Rectification: Ask us to correct inaccurate or incomplete information
- Erasure: Request deletion of your personal data in certain circumstances
- Restriction: Ask us to limit how we use your data
- Portability: Receive your data in a structured, commonly used format
- Objection: Object to processing based on legitimate interests or for marketing
To exercise any of these rights, please contact us using the details below.
International Transfers
Your personal information is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a revised "last updated" date.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
Lunar-Burst
47 Castle Boulevard
Nottingham, NG7 1FE
Email: [email protected]
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues.