Legal

Privacy Policy

Effective date: 4 May 2026. We keep this document honest and human-readable.

1. Who we are

Lumix Labs (a division of Lumix Solutions LTD.) is the data controller for personal data collected through this website (lumixlabs.com) and our services.

Registered address: Lagos, Nigeria. You can reach our Data Protection contact at privacy@lumixlabs.com.

2. What data we collect and why

DataWhy we collect itLawful basis (NDPA)
Name, email, company, project briefTo respond to project enquiriesLegitimate interest / Pre-contractual steps
Newsletter email addressTo send product updates (opt-in only)Consent
IP address, browser type, pages visitedSecurity, debugging, and aggregate analyticsLegitimate interest
Cookies (see §5)Site functionality and optional analyticsConsent (non-essential) / Legitimate interest (essential)

3. How long we keep your data

  • Enquiry data — retained for 2 years from last contact, then securely deleted unless a contract is in place.
  • Newsletter — retained until you unsubscribe.
  • Server logs — retained for 90 days for security purposes.

4. Who we share your data with

We do not sell your data. We share it only with sub-processors necessary to operate our services, each bound by a Data Processing Agreement:

  • Hosting provider — for website and server infrastructure.
  • Email service provider — to deliver responses and newsletters.
  • Analytics provider — if you consent to analytics cookies (see §5).

We may disclose data if required by Nigerian law or a valid court order.

5. Cookies

We use two categories of cookies:

  • Essential cookies — necessary for the site to function (e.g. form submission state). These do not require consent.
  • Analytics cookies — used to measure site traffic in aggregate. These are only set after you accept via the cookie banner.

You can change your cookie preference at any time by clicking .

6. Your rights under the NDPA 2023

As a data subject you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — ask us to delete your data (subject to legal retention obligations).
  • Restriction — ask us to pause processing in certain circumstances.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent — at any time, without affecting the lawfulness of prior processing.
  • Lodge a complaint — with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

To exercise any right, email privacy@lumixlabs.com. We will respond within 30 days as required by the NDPA.

7. Data security

We apply industry-standard safeguards including TLS encryption in transit, access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

8. Children's data

Our services are not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a child has submitted data to us, contact us at privacy@lumixlabs.com and we will delete it promptly.

9. Changes to this policy

We may update this policy as our services evolve. Material changes will be announced via an updated effective date and, where appropriate, a notice on the site. Continued use of the site after changes constitutes acceptance.

10. Contact us

Questions or requests: privacy@lumixlabs.com
Lumix Labs (a division of Lumix Solutions LTD.), Lagos, Nigeria.

Need to submit a data request?

Email privacy@lumixlabs.com with subject line "Data Subject Request" and your full name. We will respond within 30 days.

Back to Lumix Labs home.