Legal & Data Protection

Privacy Policy

Effective date: 17 August 2026 · Last updated: 29 September 2026 · Governing law: India (Kerala)

Luminex Brands ("Luminex", "we", "us", "our") provides business strategy, brand architecture and digital growth services — including websites and platforms, enquiry and lead systems, WhatsApp business communication and client portals. This policy explains what personal data we collect through www.luminexbrands.com, why we collect it, how we use and share it, and the rights you have under applicable law, including India's Digital Personal Data Protection Act, 2023 (DPDP Act). By using this website or submitting your information to us, you acknowledge this Privacy Policy.

1. Who we are — Data Fiduciary details

Under the DPDP Act, Luminex Brands acts as the Data Fiduciary for personal data collected through this website and our client-facing services.

  • Trade name: Luminex Brands
  • GSTIN: 32BZAPA9495H2ZC
  • Registered office: Attoorkonam, Karingannor P.O., Kollam, Kerala – 691516, India
  • Email: info@luminexbrands.com · Phone / WhatsApp: +91 73068 81214

2. Personal data we collect

  • Data you give us directly — name, email, phone/WhatsApp number, company name, business details and message content submitted through our contact forms or WhatsApp.
  • Data from Meta advertising (Lead Ads) — if you respond to a lead form on a Luminex- or client-run Meta/Facebook/Instagram ad, we receive the fields you submit.
  • Client & portal data — for clients, business, billing, campaign and account data needed to deliver services, held in our CRM and internal systems.
  • Team data — for Luminex team members and contractors, access data for the internal team portal.
  • Automatically collected data — standard technical data such as IP address, browser/device type, pages visited and referral source, collected via cookies and similar technologies.

3. Why we process your data

  • respond to enquiries and provide quotations or consultations;
  • deliver contracted services — strategy, brand architecture, campaign management, lead generation, websites and software;
  • manage client relationships in our CRM;
  • create, run and optimise advertising campaigns on Meta and Google platforms on behalf of our clients and for Luminex's own marketing;
  • route leads captured through a client's campaign to that client only;
  • communicate via WhatsApp Business for enquiries, updates and support;
  • operate client and team login portals;
  • comply with legal obligations.

4. Cookies, Meta Pixel & analytics

We and our advertising partners may use cookies, the Meta Pixel and Meta's Conversions API to measure website activity and improve advertising relevance. Our website may also use Google Analytics 4 (measurement ID G-KFR3BHE6P0) to understand aggregate usage. You can control cookies through your browser settings; blocking them may affect some site functionality.

5. Advertising run on behalf of clients

Luminex operates centralised Meta and Google advertising on behalf of multiple clients. When you submit a Lead Ad form or interact with a client campaign, the data you provide is shared with the relevant client so they can respond to your enquiry. Each client remains responsible for how they use leads once received into their own systems, in accordance with their own privacy obligations. We do not sell personal data.

6. Who we share data with

We share personal data only where necessary, with: service providers and processors that help us operate (for example CRM, hosting and communication tools); advertising platforms (Meta, Google) for campaign delivery and measurement; the relevant client when your enquiry relates to their campaign or service; and authorities where required by law.

7. Data retention

We retain personal data only as long as necessary for the purposes described above, or as required by applicable law. Enquiries that do not convert are periodically reviewed and removed. Client records are retained for the duration of the relationship and a reasonable period afterwards for legal and business purposes.

8. Cross-border data transfers

Some of our service providers may process data on servers located outside India. Where data is transferred across borders, we rely on appropriate safeguards and contractual protections consistent with applicable law, including the DPDP Act.

9. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

  • access information about your personal data and how it is processed;
  • request correction of inaccurate or incomplete data;
  • request erasure of personal data no longer needed;
  • withdraw consent at any time;
  • nominate another person to exercise your rights in the event of death or incapacity;
  • register a grievance with us.

To exercise any of these rights, contact us at info@luminexbrands.com. We aim to respond within a reasonable time as required under applicable law.

10. Children's data

Our services are intended for businesses and adults. We do not knowingly collect personal data from children without verifiable parental consent. If you believe a child has provided us personal data, contact us and we will delete it.

11. Security

We apply reasonable technical and organisational safeguards — including access controls, restricted CRM and portal access, and secure transmission — designed to protect personal data against unauthorised access, loss or misuse.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page reflects the most recent revision, and continued use of the website constitutes acceptance of the updated policy.

13. Contact & grievance redressal

For privacy questions, data requests or grievances: