loader
Logo

Privacy Policy

Last updated: 2025-12-26

1. Data Controller

The data controller is: The data controller is:

  • Company Name: Luana CRM OÜ
  • Registration Country: Estonia
  • Registered Address: Harju maakond, Lasnamäe linnaosa, Sepapaja tn 6, Tallinn, Estonia
  • Email: [email protected]

Depending on the contractual relationship, different Lua CRM entities (Armenia, Bulgaria, Estonia) may act as the data controller or data processor.

2. Scope of This Policy

This Privacy Policy applies to:

  • Visitors of our websites
  • Registered users of Lua CRM
  • Customers, partners, and their authorised users
  • Data processed through Lua CRM on behalf of customers

Lua CRM may act as:

  • Data Controller for its own business data
  • Data Processor for customer-uploaded data

3. Personal Data We Collect

3.1 Account and User Data

  • Full name
  • Email address
  • Phone number
  • Login credentials (encrypted)

3.2 Company and Business Data

  • Company name
  • Number of employees
  • Business contacts and clients
  • Internal notes, tasks, CRM records

3.3 Données des clients et des utilisateurs finaux (Traitées pour le compte des clients)

Depending on how customers use Lua CRM, this may include: - Customer and contact management - Sales pipeline and lead tracking - Branch/office administration - Financial operations and wallet - User authentication and permissions - Business analytics and reporting - Multi-language support

  • Names and contact details
  • Appointment and service information
  • Uploaded documents and files
  • CRM communication history

3.4 Medical and Sensitive Data

When used by medical or dental organisations, Lua CRM may process:

  • Dental records and tooth details
  • Medical notes and treatment data
  • Other health-related information entered by clients

3.2 Awa data aya kucitwa fela pansi pa malamulo a wakusaka ndipo akhalira ndi njira zovinjika zoposa.

3.5 Billing and Payment Information

Payments are processed through third-party providers (e.g. Stripe, Stripe, or local operators). Lua CRM does not store full payment card details.

3.6 Technical and Usage Data

  • IP address
  • Device and browser information
  • Log files
  • Usage statistics
  • Cookies and similar technologies

4. How We Use Personal Data

1. Provide our services 2. Improve our products and services 3. Communicate with you 4. Comply with legal requirements 5. Protect our business

  • Provide and operate the Service
  • Create and manage user accounts
  • Process payments and subscriptions
  • Enable CRM, automation, and AI features
  • Store and process uploaded data
  • Enhance system performance and security
  • Comply with legal obligations

5. AI and Automated Processing

Lua CRM utilises artificial intelligence and automation technologies to:

  • 3.2 Analyze CRM Data
  • 3.2 Zynga zyxwvutsrqponmlkjihgfdsaZYXWVUTSRQPONMLKJIHGFDSA
  • Assist users with workflows and reporting

AI processing is performed:

  • Only within the scope of user authorization
  • Kuti kwa kulekeza kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya
  • With safeguards to prevent unauthorized access

6. Legal Bases for Processing (GDPR)

1. We process personal data under the following legal bases:

  • Performance of a contract
  • Legitimate business interests
  • User consent (where required)
  • Legal obligations

7. Data Sharing & Third Parties

3.2 Tuli tuli kwa wafanyikazi wa huduma wanaokuaminiwa, ikiwemo:

  • 3.2 Mabvuto wa infrastructure ya cloud (e.g. Hetzner – Germany)
  • 3.2 Kufungula kufungula (Stripe, Stripe, wavamizi wamalo)
  • Authentication services (Google OAuth)
  • Communication services (email, notifications)
  • 3.2 Umwandilawo wa chitetezo ndi mafakitala a infrastructure (mwachitsanzo, Cloudflare)

3.2 Wose wutu wutu wutu wutu wutu wutu wutu wutu wutu wutu wutu wutu wutu wutu.

8. International Data Transfers

Data may be processed within the European Economic Area (EEA) or transferred to other jurisdictions with appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs)
  • GDPR-compliant security measures

9. Data Retention

We retain personal data:

  • As long as the account is active
  • As required to fulfil contractual and legal obligations
  • Ŋa kufwaya kufumya, ŋapa kuli kufwaya kufumya

Customers control retention of data uploaded into their CRM accounts.

10. Data Security

1. Applying technical and organisational security measures, including:

  • Encrypted data transmission (HTTPS)
  • Access control and authentication
  • Secure hosting in Germany (Hetzner)
  • Regular system monitoring and backups

11. User Rights

Depending on applicable law, users have the right to:

  • Access their personal data
  • Correct inaccurate data
  • Request deletion ("right to be forgotten")
  • Restrict or object to processing
  • Data portability
  • Withdraw consent

Requests can be sent to: [email protected]

12. Cookies and Tracking

Lua CRM uses cookies and similar technologies to:

  • Ensure proper system functionality
  • Enhance user experience
  • 3.2 Analyze platform usage

Users can manage cookie preferences through browser settings.

13. B2B, B2C, and B2G Usage

Lua CRM is used by:

  • Businesses (B2B)
  • Individual professionals (B2C)
  • Government and public institutions (B2G)

3.2 Kuli wangu wose akwenda kuba na udindo wa kufuata milao ya kulinda data kwa kila mwenye kutumia mwisho.

14. Children's Data

Lua CRM is not intended for minors. We do not knowingly collect personal data from children.

15. Amendments to This Policy

3.2 Tingalila tili ichi Nkhani ya Chinsinsi yathu nthawi ndi nthawi. Mtundu wotsirizidwa udzaonetsedwa pa webusaiti yathu ndi tsiku "Lalikuti" lolembedwa.

16. Contact Us

Kufambirana ndi mafunso a chisisi kapena zokhumba:

Company Name

Luana CRM OÜ

Phone

+372 5912-2253

Address

Harju maakond, Lasnamäe linnaosa, Sepapaja tn 6, Tallinn, Estonia