Privacy Policy

1. Who We Are

Lunvex Labs is a UK-based technology company building hardware, software and systems for capital and intelligence. We are the data controller for personal data collected through this website.

Contact: contact@laithmasri.dev

If you have any questions about how we handle your data, please write to us at that address. We aim to respond within five business days.

2. What Data We Collect and How

We collect personal data only when you voluntarily submit one of our web forms. We do not use tracking pixels, third-party advertising cookies, or behavioural profiling. The specific data collected depends on which form you use:

Waitlist form (/api/waitlist)

• Email address

QuantPod early access form (/api/early-access)

• Full name
• Email address
• Phone number (optional)
• Company or organisation name
• Your role or job title
• Intended use case

Website project enquiry form (/api/project)

• Full name
• Email address
• Phone number (optional)
• Business or organisation name
• Project description and details

We also collect standard server-side request logs (IP address, browser type, page visited, timestamp) through our hosting provider as a necessary part of operating a web service. These are not linked to form submissions or stored beyond the platform's default retention window.

3. Lawful Bases for Processing

We rely on the following lawful bases under UK GDPR (and EU GDPR where applicable):

Consent (Article 6(1)(a))

When you submit the waitlist form, you are consenting to receive updates about Lunvex Labs products and services. You may withdraw consent at any time by emailing us (see Section 9 for your rights).

Legitimate interests or steps prior to contract (Article 6(1)(b) and (f))

When you submit an early access or project enquiry form, we process your data to evaluate your interest, prepare and provide a response, and (where applicable) take steps at your request before entering into a contract. We have a legitimate interest in responding to genuine business enquiries, and this interest is balanced against your right to privacy.

4. How We Use Your Data

• To respond to your enquiry or register your interest.
• To send you relevant product updates where you have consented to hear from us.
• To assess the suitability and scope of a potential project or engagement.
• To fulfil any resulting contractual obligations.
• To comply with legal obligations if required by law or regulation.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. Third-Party Processors

We use the following sub-processors. Each has been selected for appropriate data protection standards, and we have data processing agreements in place where required by UK/EU GDPR.

Supabase (database storage)

Form submissions are stored in a PostgreSQL database hosted by Supabase, Inc. Supabase may process data on servers located outside the UK and the European Economic Area (EEA). Supabase relies on Standard Contractual Clauses (SCCs) approved by the European Commission as the transfer mechanism for international data transfers. For more information, see Supabase's privacy documentation at supabase.com/privacy.

Resend (transactional email)

When you submit a form, a notification email is sent to us via Resend, a transactional email service operated by Resend, Inc. Your data (name, email, and the content of your submission) is transmitted through Resend's infrastructure in order to deliver this notification. Resend relies on SCCs for international transfers. For more information, see resend.com/privacy.

Vercel (website hosting)

This website is hosted and served by Vercel, Inc. Vercel processes request data (IP addresses, access logs) as part of hosting our application. Vercel relies on SCCs for data transferred outside the UK/EEA. For more information, see vercel.com/legal/privacy-policy.

6. International Transfers

As noted above, data processed by Supabase, Resend and Vercel may be transferred to and stored in countries outside the UK and the EEA, including the United States. Where such transfers occur, appropriate safeguards are in place (primarily Standard Contractual Clauses approved by the European Commission and adopted under UK law by the UK Government) to ensure your data receives a level of protection equivalent to that required under UK GDPR and EU GDPR.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law:

• Waitlist data: retained until you withdraw consent or the waitlist closes, whichever is sooner.
• Early access applications: retained for up to 24 months from submission, or until the product launch is concluded, after which data is deleted or anonymised.
• Project enquiries: retained for up to 6 years from the date of submission or the conclusion of any resulting engagement, to satisfy our legal and contractual record-keeping obligations.

When data is no longer needed it is securely deleted or anonymised in a manner that prevents re-identification.

8. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. These include encrypted connections (TLS) for data in transit, access controls limiting who within Lunvex Labs can view submitted data, and reliance on processors with strong security certifications. No method of transmission or storage is completely secure, but we work to protect your data to a standard commensurate with the sensitivity of the information.

9. Your Rights

Under UK GDPR (and EU GDPR if you are in the European Economic Area) you have the following rights:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): to ask us to delete your personal data in certain circumstances.
• Right to restriction: to ask us to restrict processing of your data in certain circumstances.
• Right to data portability: to receive your data in a structured, commonly used, machine-readable format.
• Right to object: to object to processing based on legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to complain: you have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk, or by calling 0303 123 1113. If you are in the EU, you may also complain to your local data protection authority.

To exercise any of these rights, please contact us at contact@laithmasri.dev. We will respond within one month of receiving your request, as required by UK GDPR. We may ask you to verify your identity before acting on your request.

10. International Visitors

This website is operated from the United Kingdom and is primarily governed by UK law. If you are accessing it from the European Economic Area, your rights under EU GDPR also apply and are reflected in this policy. If you are accessing from other jurisdictions (including the United States, Canada or Australia), you may have additional rights under local law. We respect those rights where we are able to do so.

11. Children

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal obligations. The "Last updated" date at the top of this page will reflect the most recent revision. We encourage you to review this page periodically. Continued use of the website after changes are posted constitutes acceptance of those changes.

13. Contact

For any privacy-related questions or to exercise your rights, please contact us at: contact@laithmasri.dev.