Privacy Policy
Last updated: January 2026
This privacy policy explains how Lumard SAS ("Lumard", "we", "us") collects, uses, stores, and protects personal data when you use our website at llpudpc.com or contact us about our services. We are committed to complying with the General Data Protection Regulation (GDPR) and applicable French data protection law.
1. Who we are
The data controller is:
Lumard SAS
5 Rue d'Ashford
35300 Fougères, France
Email: [email protected]
Telephone: +33 2 23 51 80 97
2. What data we collect and why
Contact enquiries
When you submit our contact form or email us, we collect your name, email address, and any other information you include in your message. We use this data solely to respond to your enquiry. The legal basis is our legitimate interest in communicating with prospective clients (Article 6(1)(f) GDPR), or where a contract is being discussed, the necessity to take pre-contractual steps at your request (Article 6(1)(b)).
Service delivery
If you engage Lumard for a project, we collect contact information, project details, and any documentation needed to perform our services. The legal basis is the performance of a contract to which you are a party (Article 6(1)(b) GDPR).
Analytics cookies
With your consent, we may use analytics cookies to understand how visitors use this website. You can accept or decline analytics cookies via the cookie banner when you first visit. The legal basis for analytics data is your consent (Article 6(1)(a) GDPR). You may withdraw consent at any time by adjusting your browser settings or contacting us. See our Cookie Policy for details.
Essential cookies
We use a small number of essential cookies to make this website function (for example, to remember your cookie preference). These do not require consent as they are strictly necessary for the site to operate.
3. How long we keep your data
Enquiry data is kept for up to 24 months from the date of last contact, unless we enter a contractual relationship with you, in which case we retain relevant records for the period required by French commercial law (generally 10 years). Analytics data is retained in anonymised or aggregated form.
4. Who we share data with
We do not sell your personal data. We may share it with:
- Email and hosting service providers who process data on our behalf under data processing agreements
- Professional advisors (accountants, lawyers) where legally required
- Regulatory authorities or law enforcement where we are required by law to disclose
Where we use service providers outside the European Economic Area, we ensure adequate safeguards are in place (for example, Standard Contractual Clauses).
5. Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request erasure of your data (subject to legal retention obligations)
- Object to processing based on legitimate interests
- Withdraw consent at any time where consent is the basis for processing
- Data portability where processing is based on consent or contract and carried out by automated means
- Lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French supervisory authority: www.cnil.fr
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
6. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. This includes encrypted data transmission (HTTPS) and restricted access to systems holding personal data.
7. Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised. Significant changes will be communicated via the website.
8. Contact
For any questions about this policy or your data, contact us at [email protected] or by post at the address above.