Privacy Policy

Last updated: 16 June 2026. Version: 1.0-beta.

Controller

LUQVERSE LTD
Contact: info@luqverse.com

Data We Collect

• Account details (name, email, password hash)
• Business details (company name, registration number where provided)
• Email and mobile number
• Company validation data (Companies House where applicable)
• Uploaded files and documents
• Employee and HR records
• Accounting records
• Usage and security logs
• Support messages

Why We Process Your Data

• Account creation and authentication
• Private-beta validation
• Platform access and workspace management
• Storage and document management
• HR and accounting features
• Security and abuse prevention
• Support
• Legal and compliance obligations

Lawful Basis

We process personal data on the following bases: performance of a contract, legitimate interests (security, service improvement), legal obligation, and consent only where actually used (e.g. marketing communications, if any).

Data Sharing

We share data only with the following categories of provider:

• Hosting provider (infrastructure and storage)
• Email provider (transactional emails and verification codes)
• SMS provider (Pro/Business validation only)
• Companies House lookup (UK company validation)
• Support tools (if applicable)

Retention

• Beta requests: until conversion or rejection, plus a reasonable period
• Account records: duration of account plus legal retention period
• Uploaded documents: until deleted by user or account closure
• Audit and security logs: up to 2 years
• Deleted accounts: erasure within 30 days of confirmed request

Your Rights

Under data protection law, you have the right to:

• Access your personal data
• Rectification of inaccurate data
• Erasure ("right to be forgotten")
• Restriction of processing
• Object to processing
• Data portability
• Withdraw consent (where consent is the basis)
• Complain to the ICO (Information Commissioner's Office)

To exercise your rights, contact info@luqverse.com.

International Transfers

We primarily use UK/EEA-based providers. If any subprocessor operates outside the UK/EEA, appropriate safeguards (such as Standard Contractual Clauses) are in place.

Security

We implement technical and organisational measures including encryption in transit (TLS), tenant isolation, role-based access control, two-factor authentication, file validation, and audit logging.

Children

Luqora is for business use only and is not intended for children under 18.

Updates

We may update this policy. Material changes will be communicated via email or in-app notice.

TODO: Final legal review required before paid production launch.