1. Roles
You act as controller of the personal data you provide. Lumetra Shield360 acts as processor and processes personal data only on your documented instructions.
2. Categories of data
Account information (name, email, role), business information provided during assessments, incident and training records, and technical/usage data.
3. Sub-processors
We use a small set of vetted sub-processors (hosting, email delivery, analytics). We keep an up-to-date list available on request and provide notice of material changes.
4. Security
Encryption in transit and at rest, role-based access, secure development practices, monitoring, backups and incident response procedures.
5. Data subject rights
We help you respond to access, rectification, deletion and portability requests from your users.
6. International transfers
Where required, we implement appropriate transfer mechanisms, such as standard contractual clauses, for data transferred across borders.
7. Return and deletion
At the end of the contract, we delete your personal data, subject to legal retention requirements.
8. Contact
For DPA questions or a signed copy, contact hello@lumetrashield360.com.