Privacy Policy

1. Data Controller

The data controller for this website is:

2. Personal Data Collected

There is no account, no analytics, no advertising or tracking pixel, and no cookie is set for any purpose.

If you register for the pilot programme using the form on our home page, we store the work email address you enter. To evidence that you gave consent, as data protection law requires, we also record the date and time, the page the consent was given on, the IP address the request came from, and your browser's user agent string. No other field is requested.

If you request the research report, we store the first name, business email address, company and role you enter, together with the date and time, the page the request came from, the IP address and your browser's user agent string. These records are kept separately from pilot registrations and are not used to send you marketing. No other field is requested.

If you send us an email, we process the address you write from and whatever you put in your message, for the sole purpose of replying to you.

3. Purpose of Processing

Registration data is used only to contact you about the Lunav pilot programme. Correspondence is used solely to answer you. Your data is never used for advertising, and it is never sold or shared with third parties.

4. Legal Basis

For pilot registration, the legal basis is your consent under Art. 6(1)(a) GDPR.

For a research report request, the legal basis is Art. 6(1)(b) and (f) GDPR: you asked us for a document and gave the details needed to provide it, and we have a legitimate interest in knowing who is reading our research. That basis does not extend to marketing, which is why these records are held separately and why we will not email you about the pilot on the strength of a report download. If you would like us to, register using the form on the home page instead.

For correspondence you initiate, it is our legitimate interest in replying, together with steps taken at your request before entering a contract (Art. 6(1)(b) and (f) GDPR).

5. Where Your Data Is Stored

Pilot registrations and research report requests are stored in Microsoft Azure Table Storage, in a storage account hosted in the UK South region, in two separate tables. Data is encrypted in transit and at rest, and access is restricted to the application itself.

The United Kingdom is covered by a European Commission adequacy decision, so transfers there are permitted without further safeguards.

When you submit either form, we also send ourselves an internal notification email so we can reply to you promptly. That email contains the details you entered and is delivered through Microsoft Azure Communication Services, the same provider that hosts the rest of this site. It goes to a Lunav mailbox and nowhere else.

6. Storage and Retention

Registration data is kept until the pilot programme closes or until you ask us to delete it, whichever comes first. Research report requests are kept for up to twenty-four months and then deleted. Correspondence is retained only for as long as needed to handle your enquiry and any resulting business relationship.

7. Your Rights

You have the right to access, correct, or delete your personal data, to restrict or object to its processing, to receive a copy in a portable format, and to withdraw your consent at any time. You also have the right to lodge a complaint with a supervisory authority. To exercise any of these, contact us using the email address above.

8. Withdrawal of Consent and Objection

You may withdraw your consent at any time by emailing us. We will delete your registration and confirm once it is done. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.

Where we rely on legitimate interest rather than consent, which is the case for research report requests, you may object at any time under Art. 21 GDPR. Email us and we will delete the record.