Privacy Policy
Last updated: 2025-12-26
1. Data Controller
The data controller is: The data controller is:
- Company Name: Luana CRM OÜ
- Registration Country: Estonia
- Registered Address: Harju maakond, Lasnamäe linnaosa, Sepapaja tn 6, Tallinn, Estonia
- Email: [email protected]
Depending on the contractual relationship, different Lua CRM entities (Armenia, Bulgaria, Estonia) may act as the data controller or data processor.
2. Scope of This Policy
This Privacy Policy applies to:
- Visitors of our websites
- Registered users of Lua CRM
- Customers, partners, and their authorised users
- Data processed through Lua CRM on behalf of customers
Lua CRM may act as:
- Data Controller for its own business data
- Data Processor for customer-uploaded data
3. Personal Data We Collect
3.1 Account and User Data
- Full name
- Email address
- Phone number
- Login credentials (encrypted)
3.2 Company and Business Data
- Company name
- Number of employees
- Business contacts and clients
- Internal notes, tasks, CRM records
3.3 Données des clients et des utilisateurs finaux (Traitées pour le compte des clients)
Depending on how customers use Lua CRM, this may include: - Customer and contact management - Sales pipeline and lead tracking - Branch/office administration - Financial operations and wallet - User authentication and permissions - Business analytics and reporting - Multi-language support
- Names and contact details
- Appointment and service information
- Uploaded documents and files
- CRM communication history
3.4 Medical and Sensitive Data
When used by medical or dental organisations, Lua CRM may process:
- Dental records and tooth details
- Medical notes and treatment data
- Other health-related information entered by clients
3.2 Awa data aya kucitwa fela pansi pa malamulo a wakusaka ndipo akhalira ndi njira zovinjika zoposa.
3.5 Billing and Payment Information
Payments are processed through third-party providers (e.g. Stripe, Stripe, or local operators). Lua CRM does not store full payment card details.
3.6 Technical and Usage Data
- IP address
- Device and browser information
- Log files
- Usage statistics
- Cookies and similar technologies
4. How We Use Personal Data
1. Provide our services 2. Improve our products and services 3. Communicate with you 4. Comply with legal requirements 5. Protect our business
- Provide and operate the Service
- Create and manage user accounts
- Process payments and subscriptions
- Enable CRM, automation, and AI features
- Store and process uploaded data
- Enhance system performance and security
- Comply with legal obligations
5. AI and Automated Processing
Lua CRM utilises artificial intelligence and automation technologies to:
- 3.2 Analyze CRM Data
- 3.2 Zynga zyxwvutsrqponmlkjihgfdsaZYXWVUTSRQPONMLKJIHGFDSA
- Assist users with workflows and reporting
AI processing is performed:
- Only within the scope of user authorization
- Kuti kwa kulekeza kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya kapya
- With safeguards to prevent unauthorized access
6. Legal Bases for Processing (GDPR)
1. We process personal data under the following legal bases:
- Performance of a contract
- Legitimate business interests
- User consent (where required)
- Legal obligations
7. Data Sharing & Third Parties
3.2 Tuli tuli kwa wafanyikazi wa huduma wanaokuaminiwa, ikiwemo:
- 3.2 Mabvuto wa infrastructure ya cloud (e.g. Hetzner – Germany)
- 3.2 Kufungula kufungula (Stripe, Stripe, wavamizi wamalo)
- Authentication services (Google OAuth)
- Communication services (email, notifications)
- 3.2 Umwandilawo wa chitetezo ndi mafakitala a infrastructure (mwachitsanzo, Cloudflare)
3.2 Wose wutu wutu wutu wutu wutu wutu wutu wutu wutu wutu wutu wutu wutu wutu.
8. International Data Transfers
Data may be processed within the European Economic Area (EEA) or transferred to other jurisdictions with appropriate safeguards, including:
- Standard Contractual Clauses (SCCs)
- GDPR-compliant security measures
9. Data Retention
We retain personal data:
- As long as the account is active
- As required to fulfil contractual and legal obligations
- Ŋa kufwaya kufumya, ŋapa kuli kufwaya kufumya
Customers control retention of data uploaded into their CRM accounts.
10. Data Security
1. Applying technical and organisational security measures, including:
- Encrypted data transmission (HTTPS)
- Access control and authentication
- Secure hosting in Germany (Hetzner)
- Regular system monitoring and backups
11. User Rights
Depending on applicable law, users have the right to:
- Access their personal data
- Correct inaccurate data
- Request deletion ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent
Requests can be sent to: [email protected]
12. Cookies and Tracking
Lua CRM uses cookies and similar technologies to:
- Ensure proper system functionality
- Enhance user experience
- 3.2 Analyze platform usage
Users can manage cookie preferences through browser settings.
13. B2B, B2C, and B2G Usage
Lua CRM is used by:
- Businesses (B2B)
- Individual professionals (B2C)
- Government and public institutions (B2G)
3.2 Kuli wangu wose akwenda kuba na udindo wa kufuata milao ya kulinda data kwa kila mwenye kutumia mwisho.
14. Children's Data
Lua CRM is not intended for minors. We do not knowingly collect personal data from children.
15. Amendments to This Policy
3.2 Tingalila tili ichi Nkhani ya Chinsinsi yathu nthawi ndi nthawi. Mtundu wotsirizidwa udzaonetsedwa pa webusaiti yathu ndi tsiku "Lalikuti" lolembedwa.
16. Contact Us
Kufambirana ndi mafunso a chisisi kapena zokhumba:
Company Name
Luana CRM OÜ
Phone
+372 5912-2253
Address
Harju maakond, Lasnamäe linnaosa, Sepapaja tn 6, Tallinn, Estonia