lumorinthaxa - Smart Expense Categorization & Financial Management

Introduction and Data Controller

lumorinthaxa ("we," "us," or "our") operates as a comprehensive expense categorization platform designed to help individuals and businesses manage their financial data effectively. This privacy policy explains how we collect, use, process, and protect your personal information when you use our services at lumorinthaxa.com.

As the data controller, lumorinthaxa is committed to protecting your privacy and ensuring transparent data practices. We are based at Unit 1b, Ashley Crescent Sholing, Southampton SO19 9NA, United Kingdom, and we process data in accordance with UK GDPR and applicable data protection laws.

Important: By using our expense categorization services, you acknowledge that you have read, understood, and agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

Contact details including name, email address, phone number, and postal address when you register for our expense categorization services

Business information such as company name, VAT number, and business address for commercial accounts

Payment information including billing addresses and payment method details (though we don't store full credit card numbers)

Financial Data

Given our specialization in expense categorization, we process various types of financial information to provide our services effectively. This includes transaction data, expense receipts, bank statement information (when uploaded), and categorization preferences you set within our platform.

Transaction details including amounts, dates, merchant names, and descriptions for accurate categorization

Receipt images and documents you upload for expense tracking and categorization purposes

Bank account information when you choose to connect accounts through secure banking APIs

Technical Information

We automatically collect certain technical information to improve our services and ensure platform security. This data helps us optimize our expense categorization algorithms and provide better user experiences.

Device information including IP address, browser type, operating system, and device identifiers

Usage data such as pages visited, features used, time spent on platform, and interaction patterns

Log files containing technical details about your interactions with our expense management tools

How We Use Your Information

Service Provision

The primary purpose of data collection is to deliver our expense categorization services effectively. We use your financial data to automatically categorize transactions, generate expense reports, and provide insights into spending patterns that help you manage your finances better.

Processing and categorizing your expense transactions using our proprietary algorithms

Generating detailed expense reports and financial summaries for personal or business use

Providing customer support and responding to your inquiries about our categorization services

Service Improvement

We analyze usage patterns and feedback to continuously improve our expense categorization accuracy and develop new features. This helps us better serve the UK market's specific financial management needs and preferences.

Machine Learning: We use aggregated, anonymized transaction data to improve our categorization algorithms. Individual transactions are never shared, and all data used for algorithm training is stripped of personally identifiable information.

Legal and Compliance

Complying with UK financial regulations and tax reporting requirements when applicable

Preventing fraud, money laundering, and other financial crimes through transaction monitoring

Responding to legal requests from authorities when required by law

Data Sharing and Third Parties

Service Providers

We work with carefully selected third-party providers to deliver our expense categorization services. All service providers are bound by strict confidentiality agreements and data processing terms that ensure your information remains protected.

Cloud hosting providers for secure data storage and platform infrastructure (AWS, Microsoft Azure)

Payment processors for handling subscription payments and billing (Stripe, PayPal)

Banking API providers for secure account connectivity (Open Banking certified providers)

Customer support tools and communication platforms for service delivery

Data Protection Measures with Third Parties

Every third-party relationship involves comprehensive data protection agreements. We conduct regular security assessments and require all partners to maintain high standards of data security and privacy protection.

No Data Sales: We never sell, rent, or trade your personal or financial information to third parties for marketing purposes. Your expense data remains confidential and is used solely for providing our categorization services.

Legal Disclosures

In rare circumstances, we may be required to share information with regulatory authorities, law enforcement, or other legal entities. Such disclosures only occur when legally mandated and are limited to the minimum information necessary to comply with legal requirements.

Your Rights and Choices

Access and Portability Rights

Under UK GDPR, you have comprehensive rights regarding your personal data. We've designed our systems to facilitate easy exercise of these rights, ensuring you maintain control over your information.

Right of Access: Request a copy of all personal data we hold about you, including expense categories and transaction processing history

Data Portability: Export your expense data in common formats (CSV, PDF, Excel) for use with other financial management tools

Right to Rectification: Correct inaccurate personal information or update your categorization preferences at any time

Deletion and Restriction Rights

Right to Erasure: Request deletion of your account and associated expense data (subject to legal retention requirements)

Right to Restrict Processing: Limit how we process your data while maintaining your account for future use

Right to Object: Opt out of certain data processing activities, including marketing communications and analytics

Exercising Your Rights

To exercise any of these rights, contact us at info@lumorinthaxa.com with your request. We typically respond within 30 days and may require identity verification for security purposes. There's no charge for most requests, though we may apply reasonable fees for excessive or repetitive requests.

Account Controls: Many of these rights can be exercised directly through your lumorinthaxa account settings, including data export, privacy preferences, and communication settings.

Data Security and Protection

Technical Safeguards

Given the sensitive nature of financial data, we implement enterprise-grade security measures to protect your information. Our security framework follows industry best practices and is regularly updated to address emerging threats.

End-to-end encryption for all data transmission between your device and our servers using TLS 1.3 protocols

Advanced encryption (AES-256) for data storage, ensuring your expense information remains secure at rest

Multi-factor authentication options for account access and regular security monitoring

Regular security audits, penetration testing, and vulnerability assessments by independent security firms

Organizational Security

Our team follows strict security protocols and receives regular training on data protection best practices. Access to your financial data is limited to authorized personnel who require it for service delivery, and all access is logged and monitored.

Role-based access controls ensuring only necessary personnel can access specific types of data

Comprehensive employee background checks and ongoing security awareness training

Incident response procedures and breach notification protocols aligned with UK GDPR requirements

Data Breach Response

In the unlikely event of a data breach affecting your personal information, we commit to notifying you and relevant authorities within 72 hours as required by law. Our response plan includes immediate containment, impact assessment, and remediation measures to protect your interests.

Data Retention and Deletion

Retention Periods

We retain your data only as long as necessary to provide our expense categorization services and comply with legal obligations. Different types of data have different retention periods based on their purpose and legal requirements.

Active Account Data: Personal and expense data retained while your account remains active and for 13 months after account closure

Financial Records: Transaction and categorization data retained for up to 7 years to comply with UK tax and financial regulations

Marketing Communications: Contact preferences and communication history retained until you unsubscribe or for 2 years after last interaction

Technical Logs: Server logs and technical data retained for 12 months for security and service improvement purposes

Automated Deletion

Our systems automatically delete data when retention periods expire, ensuring we don't keep information longer than necessary. You'll receive notifications before any significant data deletion occurs, allowing you to export important information if needed.

Account Deletion: When you delete your lumorinthaxa account, we immediately stop processing your data for service provision and begin the secure deletion process. Some information may be retained in encrypted backups for up to 90 days before complete removal.

International Data Transfers

Data Processing Locations

While lumorinthaxa operates primarily in the United Kingdom, some of our service providers may process data in other countries. We ensure all international transfers comply with UK GDPR requirements and provide adequate protection for your information.

Primary data processing occurs within the UK and European Economic Area using certified data centers

Limited processing in other countries only occurs with adequate safeguards such as Standard Contractual Clauses or adequacy decisions

All international service providers undergo comprehensive data protection assessments before engagement

Transfer Safeguards

When international transfers are necessary, we implement additional security measures including enhanced encryption, regular audits of overseas processors, and specific contractual provisions that ensure your rights remain protected regardless of processing location.

Cookies and Tracking Technologies

Cookie Usage

Our expense categorization platform uses cookies and similar technologies to enhance functionality, remember your preferences, and improve user experience. We categorize cookies based on their purpose and provide clear controls for managing your preferences.

Essential Cookies: Required for basic platform functionality, security, and user authentication (cannot be disabled)

Functional Cookies: Remember your categorization preferences, dashboard settings, and personalization choices

Analytics Cookies: Help us understand platform usage patterns and improve our expense categorization features

Cookie Management

You can manage cookie preferences through your browser settings or our cookie preference center. Disabling certain cookies may limit platform functionality, but essential features of our expense categorization service will continue to work.

Third-Party Cookies: We limit third-party cookies to essential service providers and never allow advertising or tracking cookies that aren't directly related to improving our expense management services.

Children's Privacy

lumorinthaxa's expense categorization services are designed for adults and businesses. We don't knowingly collect personal information from individuals under 18 years of age. If we become aware that we've collected data from someone under 18, we'll delete it promptly and may suspend the associated account.

Parents or guardians who believe their child has provided personal information to lumorinthaxa should contact us immediately at info@lumorinthaxa.com. We take children's privacy seriously and will investigate any such reports promptly and thoroughly.

Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our services, legal requirements, or data practices. Significant changes will be communicated through email notifications and prominent website notices at least 30 days before they take effect.

Minor updates (such as contact information changes) may be made without advance notice

Material changes affecting how we collect, use, or share your data will require explicit consent or opt-in confirmation

Previous versions of this policy are archived and available upon request for transparency

Continued use of lumorinthaxa's expense categorization services after policy updates constitutes acceptance of the revised terms. If you disagree with changes, you may close your account and request data deletion at any time.

Privacy Policy