Privacy Policy

Last updated: March 1, 2026

1. Introduction

Luminova Ltd ("Company", "we", "us", or "our"), registered in Bulgaria with its principal office in Sofia, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you visit our website luminovalabs.net ("Website").

We are fully committed to compliance with the General Data Protection Regulation (GDPR) and applicable Bulgarian data protection legislation.

2. Data Controller

The data controller responsible for your personal data is:

Luminova Ltd
Sofia, Bulgaria
hello@luminovalabs.net

3. What Data We Collect

This Website is primarily informational and does not require you to create an account or submit personal data. We may collect the following types of information:

• Contact data: If you email us at hello@luminovalabs.net, we receive your email address, name, and any information you choose to include in your message.
• Technical data: Standard server logs that may include your IP address, browser type, operating system, referring URL, and pages visited. This data is collected by our hosting provider (Cloudflare).
• Cookies: This Website uses only essential cookies necessary for the site to function. We do not use analytics, advertising, or tracking cookies.

4. How We Use Your Data

We process personal data only for the following purposes:

• To respond to your inquiries when you contact us via email
• To maintain and improve the security and performance of our Website
• To comply with legal obligations

5. Legal Basis for Processing

Under the GDPR, we process your data based on:

• Legitimate interest (Article 6(1)(f)): for Website security and performance monitoring
• Consent (Article 6(1)(a)): when you voluntarily contact us via email
• Legal obligation (Article 6(1)(c)): where we are required to retain data by law

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with the following categories of service providers who act as data processors on our behalf:

• Hosting: Cloudflare, Inc. — Website hosting and CDN services (data processed in accordance with their privacy policy)
• Email: Our email service provider, for handling correspondence

We do not transfer personal data outside the European Economic Area (EEA) unless adequate safeguards are in place in accordance with GDPR requirements.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Email correspondence: retained for up to 24 months after last contact, unless an ongoing business relationship exists
• Server logs: automatically deleted after 30 days by our hosting provider

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restriction: Request restriction of processing of your data
• Right to data portability: Receive your data in a structured, commonly used format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at hello@luminovalabs.net. We will respond within 30 days.

9. Cookies

This Website uses only strictly necessary cookies required for the Website to function properly. These cookies do not require consent under the GDPR. We do not use any analytics, advertising, or third-party tracking cookies on this Website.

10. Children's Privacy

This Website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Third-Party Websites

This Website contains links to our product websites (pilotfi.app, pragmaclinical.com, pharmshelf.app) and potentially other third-party websites. Each product website has its own privacy policy. We encourage you to read the privacy policy of every website you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

13. Supervisory Authority

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. In Bulgaria, the relevant authority is:

Commission for Personal Data Protection (CPDP)
Sofia 1592, Bulgaria
2 Prof. Tsvetan Lazarov Blvd.
Website: www.cpdp.bg

14. Contact

For any questions or requests regarding this Privacy Policy or your personal data, please contact us at:

Luminova Ltd
Sofia, Bulgaria
hello@luminovalabs.net