Privacy notice
This notice explains what happens to the information you give us when you apply for a Lumora launch partner spot or book a call with us.
Last updated: .
1. Who we are
The data controller is Lumora, a company registered in England and Wales with company number , registered office . We are registered with the Information Commissioner's Office (ICO), registration .
Questions about this notice: info@lumoraai.co.uk.
2. What we collect
When you complete the application form we collect:
- About you: your name, work email address, mobile number and your role at the practice.
- About your practice: practice name, postcode, practice type, patient mix (private, mixed or NHS), number of dentists, whether you're taking new private patients, and, for practice managers, whether the owner or principal will join the call.
- About your visit: the page you arrived on, campaign parameters in the link you used (for example
utm_source), the time you agreed to be contacted, and, if you accept cookies, Meta's advertising identifiers. - If you book a call: the time you choose, and anything you type into the booking form.
We don't collect any patient data through this page, and we ask you not to include any.
3. Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR Article 6) |
|---|---|
| Assessing your application and deciding whether your practice is a fit for a launch partner spot | Steps at your request before entering into a contract (6(1)(b)) |
| Contacting you about your application by email, phone, SMS or WhatsApp, and arranging the call | Steps before a contract (6(1)(b)) and our legitimate interest in responding to enquiries (6(1)(f)) |
| Keeping a record of applications, including practices that weren't a fit, so we can contact you when we open to more practices | Legitimate interests (6(1)(f)). You can object at any time. |
| Measuring and improving our advertising (Meta Pixel and Conversions API) | Consent (6(1)(a)), given through the cookie banner. Cookies are only set if you click Accept. |
| Preventing spam and abuse of the form | Legitimate interests (6(1)(f)) |
4. Who we share it with
We use these processors, who act on our instructions:
- Vercel Inc. hosts this page and runs the code that receives your form. Requests may be processed in the EU and the United States.
- Resend delivers the email notification of your application to our team inbox.
- GoHighLevel (HighLevel Inc.) is the CRM where we keep applications and manage follow-up, if enabled.
- Our calendar provider handles call bookings when you pick a time.
- Meta Platforms Ireland Ltd. receives advertising measurement events if you accept cookies. Where personal data is sent to Meta's Conversions API it is hashed first. Meta acts as an independent controller for its own use of that data.
Where a provider processes data outside the UK we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision. We don't sell your data.
5. How long we keep it
- Applications that become launch partnerships: for the length of the relationship and six years afterwards, for contractual and tax records.
- Unsuccessful or incomplete applications, and waitlist requests: 24 months from the date you applied, then deleted.
- Advertising measurement data: as set out in Meta's own retention terms; our copy of event logs is deleted within 90 days.
6. Cookies
The page works without cookies. If you click Accept on the cookie banner, the Meta Pixel sets _fbp and, where you arrived from a Meta ad, _fbc. These last up to 90 days. If you click Reject, no advertising cookies are set. Your choice is remembered in your browser for six months. To change it, clear this site's data in your browser settings.
7. Your rights
Under UK GDPR you can ask us to: access the personal data we hold about you; correct it; delete it; restrict how we use it; object to processing based on legitimate interests; and, where processing is based on consent or contract, receive a copy in a portable format. You can withdraw consent at any time without affecting earlier processing.
To exercise any right, email info@lumoraai.co.uk. We respond within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd appreciate the chance to resolve it first.
8. Changes
We'll update this notice if our processing changes and show the date at the top.