Cookie policy

Last Updated: 2025-11-04

This Cookie Policy (“Policy”) explains how LumaDock Ltd, trading as LumaDock (“LumaDock”, “we”, “us”, “our”), uses cookies, device identifiers, scripts, pixels, storage objects, and similar tracking technologies (collectively, “Cookies”) when you access lumadock.com or any related subdomains (“Website”).

This Policy applies to all Website visitors, regardless of the device used, and it is designed to comply with the UK GDPR, EU GDPR, the ePrivacy Directive, PECR, and other applicable data protection frameworks.

1. Definitions

1.1 Cookies

Cookies are small text files stored on your device by your browser at the request of a website. Cookies cannot execute code, install software, or access local files, and are not inherently harmful.

1.2 Pixels / Web Beacons

Small transparent images or code snippets used for technical analytics, performance monitoring, and security verification.

1.3 LocalStorage & SessionStorage

Browser-based storage mechanisms used to save preferences, UI behaviour, or stateful information.

1.4 Fingerprinting Technologies

Techniques that analyse browser or device attributes (OS, resolution, fonts, etc.) for security or consistency checking. LumaDock does not use fingerprinting for behavioural advertising.

1.5 First-Party vs. Third-Party Cookies

• First-Party Cookies: Set by lumadock.com.
• Third-Party Cookies: Set by external providers integrated with the Website (e.g., analytics, security, payment gateways).

2. Why LumaDock Uses Cookies

Cookies and tracking technologies are essential for operating a secure, stable cloud hosting environment and delivering the Website’s full functionality. LumaDock uses Cookies for:

• Service delivery & authentication – enabling login systems, maintaining user sessions, and allowing access to the client area.
• Security & abuse prevention – detecting automated attacks, preventing credential misuse, fraud verification, and rate limiting.
• Infrastructure performance – improving Website load speed, routing traffic, and handling congestion.
• Analytics – aggregated usage statistics for service optimisation.
• User experience – remembering language, region, and dashboard preferences.
• Compliance – storing your consent selections.

We do not use Cookies for sensitive profiling or cross-site behavioural advertising.

3. Categories of Cookies and Legal Basis

3.1 Strictly Necessary Cookies (No Consent Required)

These support core Website operations:

• Authentication & account access
• Shopping cart and checkout flows
• Security protections (anti-bot, anti-abuse, fraud prevention)
• Server load balancing and routing
• Remembering cookie consent settings

Lawful Basis: Contractual necessity (Art. 6(1)(b)), Legitimate interest (Art. 6(1)(f)).

3.2 Functional Cookies

Used to enhance the usability and consistency of the Website.

• Remembering login state
• Saving form inputs or preferences
• Personalising dashboard layout

3.3 Analytics & Performance Cookies

Used only in anonymised or pseudonymised form to understand user behaviour and Website performance. Analytics are optional and require consent.

3.4 Marketing & Tracking Cookies

Used rarely and solely for campaign attribution (e.g., discount codes, affiliate referrals). No long-term tracking or cross-site profiling occurs.

3.5 Third-Party Cookies

Some integrations may place Cookies, including:

• Payment processors (Stripe, PayPal)
• Security providers (Cloudflare, anti-fraud modules)
• Chat or support tools
• Analytics engines

These entities act as independent Controllers regarding their Cookies.

4. Cookie Lifetimes

• Session Cookies: Removed when you close your browser.
• Persistent Cookies: Stored until expiry or manual deletion.
• LocalStorage/SessionStorage: Retained until cleared by the user.

5. Management of Cookies

Users may manage Cookie preferences through:

• Your browser settings
• Device privacy controls (e.g., ITP)
• Cookie banner controls (where required)

Blocking essential Cookies may prevent proper Website operation, including:

• Accessing your LumaDock account
• Completing orders
• Submitting support tickets
• Displaying client-area elements correctly

6. Personal Data and GDPR Compliance

Where Cookies collect personal data such as IP addresses, device metadata, page performance, or authentication tokens, processing relies on the following lawful bases:

• Performance of a contract – accessing and managing cloud or VPS services.
• Legitimate interests – security, infrastructure stability, and fraud prevention.
• Consent – non-essential analytics or convenience features.

For detailed processing rules, refer to the LumaDock Privacy Policy.

7. International Data Transfers

Some third-party integrations may process data outside the UK or EEA. When this occurs, LumaDock ensures appropriate safeguards, including:

• EU Standard Contractual Clauses (SCCs)
• UK Addendum
• Vendor risk and security assessments
• Contractual data protection obligations

8. Security Measures

LumaDock secures Cookies using:

• Secure, HttpOnly, SameSite flags where appropriate
• TLS 1.2+ encrypted traffic
• DDoS filtering and threat mitigation
• Firewall policies and rate limiting
• Strict access control and audit logging

9. Your Rights

Under GDPR and UK GDPR, you may request:

• Access to personal data associated with Cookies
• Correction of inaccurate information
• Deletion (where legally allowed)
• Restriction of processing
• Objection to processing (where based on legitimate interests)
• Withdrawal of consent
• Data portability (where applicable)

10. Children

The LumaDock Website is not intended for users under 18. We do not knowingly process data relating to minors or use tracking for profiling children.

11. Do Not Track (DNT)

DNT signals are not universally standardised. LumaDock does not currently respond to DNT but allows users to manage non-essential Cookies through browser and consent settings.

12. Amendments to This Policy

LumaDock may update this Policy to reflect:

• Legal or regulatory changes
• New platform features
• Updates to Cookie implementations or vendors

Revised versions take effect immediately upon publication.

13. Contact Information

LumaDock Ltd — trading as LumaDock
13 Hanover Square, Mayfair, London W1S 1HN, United Kingdom
Phone: +44 20 4578 1002
Email: [email protected]