Legal

Privacy Policy

Last updated: 18 July 2026

This policy explains how Elumi AI Limited (“Elumi AI”, “we”, “us”) processes personal data when you visit elumiai.com, our company website. This is a company and product-studio website; it does not offer accounts, forms, or a store. Our products (such as HeyLoLo) have their own separate privacy notices.

1. Controller

Because we are established outside the EEA and the UK, we are designating representatives under Article 27 GDPR and section 8 of the UK GDPR; their details will be added here once appointed. We have not appointed a Data Protection Officer for this website, as the processing here is limited; you can contact us directly at privacy@elumiai.com.

2. What we collect, and why

2.1 Server logs

When you load a page, our hosting provider automatically processes technical data needed to deliver the site and keep it secure: your IP address, the requested URL, the date and time, the referring page, and your browser/OS user-agent. Legal basis: our legitimate interest in operating and securing the website (Art. 6(1)(f) GDPR). These logs are kept for a short period (typically up to 30 days) and are not used to profile you.

2.2 Fonts

This site currently loads the Inter and Space Grotesk typefaces from Google Fonts (Google Ireland Ltd. / Google LLC). When a font is requested, your IP address is transmitted to Google so the font file can be served. Legal basis: our legitimate interest in consistent typography (Art. 6(1)(f) GDPR). We are moving to self-hosted fonts to avoid this transfer entirely.

2.3 If you email us

If you contact us by email, we process your address and message to answer you, and keep the correspondence for as long as needed to do so and to meet any legal record-keeping duty. Legal basis: our legitimate interest in responding to enquiries, and, where relevant, steps taken at your request before entering a contract (Art. 6(1)(b) and (f) GDPR).

2.4 Cookies and tracking

This website sets no advertising or analytics cookies and runs no third-party trackers. A single technical preference (your light/dark theme choice) is stored locally in your browser and is never sent to us. If we add any non-essential cookies in future, we will ask for your prior consent.

3. Recipients and international transfers

We use a small number of processors and providers to run this site: Hostinger International Ltd. (hosting), and Google (fonts, as above). Where personal data is transferred outside the EEA/UK/DIFC, we rely on the European Commission’s Standard Contractual Clauses, the EU–US Data Privacy Framework where the recipient is certified, and equivalent DIFC transfer mechanisms. You can request details at privacy@elumiai.com.

4. Your rights

You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw any consent. To exercise these rights, email privacy@elumiai.com.

You may also lodge a complaint with a supervisory authority: in the EU/EEA, the authority of your country of residence; in the UK, the Information Commissioner’s Office; and for our DIFC establishment, the DIFC Commissioner of Data Protection.

5. Security

We apply technical and organisational measures appropriate to the risk (Art. 32 GDPR), including TLS encryption for all traffic to this site and least-privilege administrative access. If a personal-data breach is likely to result in a risk to your rights, we will notify the competent authority within 72 hours where required and inform you where the risk is high.

6. Our products

Data processed inside our products is governed by their own notices — for HeyLoLo, see the HeyLoLo Privacy Policy.

7. Changes

We may update this policy; when we do, we will change the “Last updated” date above and post the new version here.

8. Contact

For any privacy question or request: privacy@elumiai.com, or by post to Elumi AI Limited at the registered office above.