Privacy Policy

1. Who we are

Lumenai is a software and AI consultancy based in Doha, Qatar. In this policy, "we", "us" and "our" refer to Lumenai. "You" refers to anyone visiting this website or contacting us through it.

For anything relating to your personal data, contact us at [email protected].

This policy is written with reference to Qatar's Personal Data Privacy Protection Law, Law No. 13 of 2016, which governs the processing of personal data in Qatar.

2. What this policy covers

This policy covers personal data we collect through lumenaiconsultancy.com. It does not cover:

• Data we process on behalf of clients inside systems we have built for them. In those cases the client is the data controller and their own privacy policy applies. Our role is set out in the contract between us.
• Third party websites you reach by following a link from ours.

3. What we collect

3.1 Information you give us

When you submit the contact form, we collect:

• Name (required)
• Email address (required)
• Phone or WhatsApp number (required)
• Company name (optional)
• Service you are enquiring about (required)
• Approximate budget (optional)
• Your message, including anything you choose to tell us about your project (required)

We also record which page the enquiry came from, so we know what you were reading when you got in touch.

If you email, message or call us directly, we hold that correspondence and any information contained in it.

3.2 Information collected automatically

This website does not use analytics or advertising cookies, and we do not run tracking pixels.

However, the site loads fonts and styling resources from third party providers, and those providers receive your IP address and basic browser information as a technical consequence of your browser requesting the file:

• Google Fonts (fonts.googleapis.com), which serves the typefaces used across the site
• Tailwind CSS CDN (cdn.tailwindcss.com), which serves the styling framework

Our own hosting provider also keeps standard server logs, which typically include IP address, browser type, pages requested and timestamps. These are used for security and to keep the site running, not to build a profile of you.

3.3 What we do not collect

We do not ask for and do not want financial details, identity documents, or any sensitive personal data through this website. Please do not include such information in the contact form message field.

4. Why we use it and on what basis

What we do	Data used	Basis
Reply to your enquiry and prepare a quote	All contact form fields	Your consent, given when you tick the consent box, and steps taken at your request before entering a contract
Follow up on an enquiry you have not responded to	Name, email, phone	Your consent
Keep records of enquiries and correspondence	Contact details and message	Our legitimate interest in maintaining business records
Keep the website secure and available	Server log data	Our legitimate interest in operating the site securely

We do not sell your personal data. We do not share it with advertisers. We do not add you to a marketing list from a contact form submission, and we do not send unsolicited newsletters.

5. Who we share it with

Your enquiry is transmitted to a customer relationship management system that we use to receive and track enquiries. That system is operated by a third party service provider on our behalf, and access is limited to the people who need it to respond to you.

Beyond that, we share personal data only where:

• A service provider needs it to perform a function for us, such as email hosting, under terms that require them to protect it
• We are required to disclose it by law or by a competent authority
• You have asked us to

6. Where your data is held

Personal data submitted through this website may be stored on servers located outside Qatar, depending on where our service providers operate. Where data is transferred outside Qatar, we take reasonable steps to ensure it remains protected to a standard consistent with the Personal Data Privacy Protection Law.

If you would like to know specifically where your data would be held before submitting an enquiry, email us and we will tell you.

7. How long we keep it

• Enquiries that do not become projects: retained for up to 24 months, then deleted, so we have context if you come back to us
• Client records: retained for the duration of the engagement and afterwards for as long as required for legal, tax and accounting purposes
• Server logs: retained for a short period as determined by our hosting provider, typically weeks rather than months

You can ask us to delete your data sooner. See section 8.

8. Your rights

Under Qatar's Personal Data Privacy Protection Law, you have rights over your personal data. These include the ability to:

• Ask what personal data we hold about you and obtain a copy of it
• Ask us to correct data that is inaccurate or incomplete
• Ask us to delete your data, where we have no continuing legal or contractual reason to keep it
• Withdraw consent you previously gave, at any time, without affecting processing that already took place
• Object to processing of your data in certain circumstances

To exercise any of these, email [email protected]. We will respond within 30 days. We may need to verify your identity first, which protects you as much as us.

If you are not satisfied with how we handle your request, you may raise the matter with the competent data protection authority in Qatar.

9. Security

We take reasonable technical and organisational measures to protect personal data, including encrypted transmission, restricted access on a need-to-know basis, and keeping the systems we operate up to date.

We should be honest about the limits of that statement. No method of transmitting or storing data is completely secure, and any organisation claiming otherwise is overstating things. What we can commit to is not collecting more than we need, not keeping it longer than necessary, and telling you promptly if something goes wrong that affects your data.

10. Cookies

This website does not set analytics, advertising or tracking cookies.

Your browser may store technical data relating to the third party resources described in section 3.2. Those are controlled by the respective providers rather than by us, and you can manage them through your browser settings.

If we introduce analytics or other cookies in future, we will update this policy and, where required, ask for your consent before setting them.

11. Children

This website is intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted data to us, contact us and we will delete it.

12. Changes to this policy

We may update this policy as our services or the applicable law change. The date at the top shows when it was last revised. Where a change materially affects how we handle your data, we will take reasonable steps to notify you.

13. Contact

Questions about this policy, or about how we handle your data:

Lumenai
Doha, Qatar
Email: [email protected]