Privacy policy
Last updated
Template only — not legal advice.This document ships with the FoundryLume theme as a starting structure. Have a qualified lawyer in your jurisdiction review and rewrite it before you publish.
1. Who we are
FoundryLume Labs Ltd. (“we”, “us”) operates this website. For questions about this policy or your data, contact us at hello@example.com.
Replace this section with your own legal entity, registered address and, if you are subject to the GDPR and required to have one, your Data Protection Officer’s contact details.
2. What we collect
We collect only what we need to run the site and answer enquiries:
- Information you give us. Name, email address, company and message content when you submit a contact or newsletter form.
- Technical information. IP address, browser type and pages visited, processed by our hosting provider for security and reliability.
- Preferences. Your light/dark theme choice, stored locally in your browser and never transmitted to us.
We do not use advertising trackers, and we do not sell personal data.
3. Why we process it
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Replying to your enquiry | Legitimate interest / pre-contractual steps |
| Sending the newsletter | Consent, withdrawable at any time |
| Keeping the site secure | Legitimate interest |
| Meeting legal obligations | Legal obligation |
4. How long we keep it
Enquiry correspondence is retained for 24 months. Newsletter subscriptions are retained until you unsubscribe. Server logs are retained for 30 days.
Adjust these periods to match what you actually do.
5. Who we share it with
We share personal data only with service providers who process it on our behalf under a data processing agreement — typically our hosting provider, email service and, where applicable, our CRM.
List your actual processors here. Vague language is a liability, not a shield.
6. International transfers
Where a processor operates outside the UK/EEA, transfers are covered by Standard Contractual Clauses or an adequacy decision.
7. Your rights
Under the GDPR and UK GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to processing. You may also withdraw consent at any time and lodge a complaint with your supervisory authority.
To exercise any of these, email hello@example.com. We respond within one month.
8. Cookies
This theme ships without analytics or advertising cookies. Your theme
preference is stored in localStorage, which is not a cookie and is never
sent to a server. See the cookie policy for detail.
9. Security
We use TLS in transit, encryption at rest, and least-privilege access controls. No system is perfectly secure; we will notify you and the relevant authority of a qualifying breach without undue delay.
10. Changes
We will post any changes on this page and update the date above. Material changes will be announced by email to subscribers.