Privacy

Privacy Policy

Last updated: December 7, 2025

This notice explains how Global Lux Agency (“GLA”, “we”, “our”) collects, uses, shares, and protects personal data in line with UK GDPR, EU GDPR, and US requirements (including CCPA/CPRA where applicable).

1) Data we collect

  • Contact details (name, email, phone) when you reach out or become a client.
  • Business context you provide (brand info, goals, content needs).
  • Technical data (IP, device/browser info) via analytics or server logs.
  • Communications and files you send us.

2) How we use data

  • Provide and improve our services and site.
  • Respond to inquiries and manage client relationships.
  • Security, fraud prevention, and compliance.
  • With consent where required (e.g., certain marketing).

3) Legal bases (UK/EU)

We process personal data based on: performance of a contract; legitimate interests (e.g., service improvement, security); legal obligations; and consent where required.

4) Sharing

  • Vetted service providers (e.g., hosting, analytics, communications) under appropriate safeguards.
  • Legal, compliance, or safety requirements.
  • Transfers outside the UK/EU use appropriate safeguards (e.g., SCCs/IDTA where applicable).

5) Cookies and analytics

We may use cookies/analytics to understand site usage. Where required, we obtain consent via banners or settings. You can control cookies in your browser.

6) Retention

We keep personal data only as long as needed for the purposes above, to meet legal requirements, or to resolve disputes. We anonymize or securely delete when no longer necessary.

7) Security

We use appropriate technical and organizational measures to protect personal data. No system is perfectly secure, so please use strong passwords and notify us of any suspected issues.

8) Your rights

  • UK/EU: rights of access, rectification, erasure, restriction, objection, data portability, and to withdraw consent.
  • US (where applicable, e.g., CCPA/CPRA): rights to know, delete, correct, and opt out of sale/share of personal data. We do not sell personal data.
  • To exercise rights, email [email protected]. We verify identity before fulfilling requests.

9) Children

Our services are not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided data, contact us to remove it.

10) International considerations

For users in the UK/EU, you may lodge a complaint with your local supervisory authority. For US users, you may contact your state attorney general or equivalent regulator if applicable.

11) Changes

We may update this policy. Material changes will be reflected with a new date and, where appropriate, additional notice.

12) Contact

Privacy questions or requests: [email protected].

To request deletion directly, visit /deleteme.