Privacy Notice
Plain English, no boilerplate padding. This notice explains how Lumera RE Ltd handles personal data under the UK GDPR and the Data Protection Act 2018.
Last updated: 30 July 2026
Who we are (the data controller)
Lumera RE Ltd, Director Generals House, 15 Rockstone Place, Southampton, SO15 2EP. Contact us at admin@lumera-re.co.uk or 02382 721845.
ICO registration number: [ICO registration number].
What personal data we collect
When you complete the quote form or otherwise contact us, we collect:
- Your name, email address and telephone number.
- Your address details — postcode, and address line where you provide it.
- Property and energy details — property type, roof type, number of sites, approximate monthly bill or annual consumption, interest in battery, EV charging or heat pumps, and whether half-hourly data is available.
- Anything you write in the free-text message box.
- Technical and source data — the page you submitted from, referring URL, campaign tags (UTM parameters) and your browser user agent.
We do not collect special category data, and we ask that you do not send it to us.
Why we use it, and our lawful basis
- Responding to your enquiry, arranging a survey and preparing a quote — lawful basis: consent (the tick box on the form) and legitimate interests (replying to someone who has asked us for a quote, and running our business efficiently).
- Preventing spam and abuse of our forms — legitimate interests in keeping our systems secure.
- Meeting legal, warranty and compliance obligations where you become a customer — legal obligation and contract.
You can withdraw consent at any time by emailing admin@lumera-re.co.uk. Withdrawal does not affect processing carried out before you withdrew.
How long we keep it
Enquiries that do not become projects are kept for 24 months from your last contact with us, then deleted. If you become a customer we keep the records required for warranty, MCS and compliance purposes for 10 years.
Who processes it for us
We do not sell your data and we do not add you to a marketing list unless you ask. We use a small number of processors under written terms:
- Supabase — Secure database hosting for enquiry records (EU / UK data centres).
- Resend — Delivers the internal email notification when an enquiry arrives (EU / US (standard contractual clauses)).
- Postcodes.io — Validates the postcode you type and returns the town — no personal data is sent (UK).
Where a processor transfers data outside the UK, the transfer is covered by an adequacy decision or the UK International Data Transfer Addendum to the EU standard contractual clauses. We may also disclose data where required by law.
Security
Enquiry records are stored in a database with row-level security so that the public cannot read them; access is limited to the Lumera RE Ltd team and our server code. Notification emails are sent over TLS.
Your rights
Under UK data protection law you have the right to:
- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct anything inaccurate or incomplete.
- Erasure — ask us to delete your data where we have no continuing need for it.
- Restriction and objection — ask us to pause or stop certain processing.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time.
To exercise any of these, email admin@lumera-re.co.uk. We respond within one month.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
We use strictly necessary cookies to run the site, and functional or analytics cookies only with your consent. Full details and how to opt out are in our cookie policy.
