1. Introduction and Data Controller
For the purposes of the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable local data protection laws, the “data controller” is the entity that determines the purposes and means of processing your personal data.
Data Controller: Luxapkoqab Advisory Ltd.
Registered Address: 12 Baker Street, London, W1U 3BH, United Kingdom
Phone: +44 20 7946 1180
Email: [email protected]
Luxapkoqab provides advisory and informational services related to financial planning and income structure discussions. This website is intended to communicate our service scope, methodology, and contact options in a clear and compliance-oriented manner.
2. Personal Data We Collect
We aim to minimize data collection and only collect what is reasonably necessary to operate the website, respond to inquiries, and maintain security. Depending on how you interact with our site, we may collect the following categories of personal data:
Data you provide
- Full name (from contact forms)
- Email address
- Phone number (if you choose to provide it)
- Message content and inquiry details
Data collected automatically
- IP address
- Browser type, device information, operating system
- Approximate location (derived from IP, city/region level)
- Pages viewed, timestamps, referral source
- Cookie identifiers and preference signals
We do not ask for sensitive categories of personal data (such as health information, political opinions, or similar special-category data) through our standard inquiry form. Please avoid including sensitive information in your message. If it is included, we will treat it with care and will only use it to the extent necessary to respond to your inquiry.
3. How We Collect Personal Data
We collect personal data using the following methods:
- Web forms: when you submit an inquiry through the contact form, we receive the information you enter (such as name, email, and message).
- Email correspondence: if you email us directly, we will process the personal data contained in your message and in any subsequent replies.
- Cookies and similar technologies: our site may store strictly necessary cookies (for basic functionality) and, if you consent, analytics and marketing cookies.
- Server logs: like most websites, our hosting infrastructure logs technical information (including IP address, user agent, and request metadata) for security and troubleshooting.
- Analytics tools: if enabled and you consent, we may use Google Analytics 4 to understand aggregated site usage (for example, which pages are read most often and how visitors navigate).
- Marketing pixels: if enabled and you consent, we may use Meta Pixel to measure the performance of our advertising and to build audiences for retargeting. This is only activated after consent where required.
We do not use hidden text, cloaking, or device-specific content switching. The information presented on the site is intended to be the same for visitors and for search engine crawlers.
4. Legal Bases for Processing (GDPR Article 6)
Where GDPR applies, we process personal data only when we have a valid legal basis. The legal basis may depend on the context and the type of data processed:
Consent (Art. 6(1)(a))
Used for optional cookies and similar technologies (analytics and marketing), and for any marketing communications where consent is required. You can withdraw consent at any time through the cookie preferences banner or by contacting us.
Contract / Steps prior to entering a contract (Art. 6(1)(b))
Used when you request information about our advisory services and we need to process your inquiry to respond, schedule a consultation, or provide requested materials.
Legitimate interests (Art. 6(1)(f))
Used for essential operational purposes such as website security, fraud prevention, maintaining service quality, and understanding aggregate site performance. When we rely on legitimate interests, we consider the impact on your rights and apply data minimization and safeguards.
Legal obligation (Art. 6(1)(c))
Used when we must retain or disclose certain information to comply with applicable law, respond to lawful requests, or meet regulatory obligations.
If you have questions about the legal basis used for a specific processing activity, contact us using the details in the Contact section of this policy.
5. Purposes of Processing
We use personal data for the following purposes:
- Service delivery and inquiry handling: respond to messages, assess service fit, and provide requested information about our advisory scope and methodology.
- Customer support: manage ongoing communications and clarify follow-up questions you raise.
- Marketing (consent-based only where required): measure advertising effectiveness and, where lawful, communicate updates about our services. We do not use high-pressure messaging and do not make promises about outcomes.
- Analytics and website improvement: understand how visitors use our website so we can improve content structure and accessibility.
- Security and fraud prevention: protect the site, prevent abuse, and maintain the integrity of our systems.
- Legal compliance: meet applicable legal obligations and respond to lawful requests.
We do not sell personal data. We also do not use your inquiry details to infer sensitive personal attributes about you.
6. Retention Periods
We keep personal data only for as long as necessary for the purposes described above, unless a longer retention period is required or permitted by law. Typical retention periods are:
| Category | Examples | Retention |
|---|---|---|
| Form submissions | Name, email, message | 2 years from last interaction |
| Email correspondence | Inquiry emails and replies | 2 years from last interaction |
| Analytics data | Usage events and device data | 14 months (where configured) |
| Cookie preferences | Consent state | 12 months (local storage) |
| Security logs | IP, request logs | 90 days (unless needed for investigation) |
If you ask us to delete your data, we will do so unless we need to retain certain information for legal obligations, legitimate security reasons, or to establish, exercise, or defend legal claims.
8. International Data Transfers
Depending on the location of our service providers, personal data may be processed outside the United Kingdom or the European Economic Area (EEA). Where this occurs and GDPR/UK GDPR applies, we use appropriate safeguards such as:
- Adequacy decisions: transfers to countries recognized as providing an adequate level of data protection.
- Standard Contractual Clauses (SCCs): contractual commitments approved by the European Commission, supplemented where appropriate.
- UK International Data Transfer Addendum / IDTA: where UK GDPR applies, we use the UK mechanisms to support compliant transfers.
You may request more information about the safeguards used for specific transfers by contacting us.
9. Your Rights Under GDPR
If GDPR or UK GDPR applies to you, you may have the following rights in relation to your personal data. These rights are not absolute and may be subject to limitations and exemptions under applicable law.
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: request correction of inaccurate or incomplete personal data.
- Right to erasure: request deletion of your personal data in certain circumstances.
- Right to restrict processing: request that we limit processing in certain circumstances.
- Right to data portability: receive certain data in a structured, commonly used, machine-readable format, and transmit it to another controller where technically feasible.
- Right to object: object to processing based on legitimate interests, including certain analytics or direct marketing activities.
- Right to withdraw consent: where we rely on consent, you can withdraw it at any time (withdrawal does not affect the lawfulness of processing before withdrawal).
To exercise these rights, contact us at [email protected]. To help us verify your identity, we may ask for reasonable information related to your request. We aim to respond within one month, although this may be extended in complex cases as allowed by law.
Right to complain
If you believe our processing of your personal data infringes data protection law, you have the right to lodge a complaint with a supervisory authority. For the United Kingdom, the supervisory authority is the Information Commissioner’s Office (ICO).
ICO address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
11. Children’s Privacy
Our website and services are not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will take steps to delete that information where required.
12. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make changes, we will update the “Last Updated” date at the top of the policy.
If a change is significant, we may provide additional notice on the website or by email where appropriate and where we have your email address for that purpose.
Last Updated: January 15, 2026
13. Contact and Data Protection Point of Contact
If you have questions about this Privacy Policy, want to exercise your rights, or want to request deletion of inquiry data, contact us:
Privacy contact (DPO function): [email protected]
Mailing address: Luxapkoqab Advisory Ltd., 12 Baker Street, London, W1U 3BH, United Kingdom
Phone: +44 20 7946 1180
For general service inquiries, use the Contact page at /contact/. Please avoid including sensitive personal data in any message.
Service disclaimer
Luxapkoqab provides advisory and informational services related to financial planning and income structure discussions. Outcomes vary depending on individual circumstances and external conditions.