Privacy Policy

Data Controller Information

openlatticeora SARL is the data controller responsible for your personal data. You can contact us at:

Data Collection

We collect personal data that you provide to us directly and automatically when you use our website. The data we collect includes:

Information You Provide

• Contact information (name, email address, phone number, company name)
• Messages and enquiries sent through our contact forms
• Project details and requirements you share with us
• Communication preferences and marketing consent

Information Collected Automatically

• IP address and location data
• Browser type, device information, and operating system
• Website usage data, pages visited, and time spent on our site
• Referral source and search terms used to find our website

How We Use Your Information

We process your personal data for the following purposes, based on legitimate legal grounds under GDPR:

Service Delivery (Legal Basis: Contract Performance)

• Responding to your enquiries and providing requested information
• Delivering beauty branding and e-commerce strategy services
• Managing client relationships and project communications
• Processing payments and managing invoicing

Business Operations (Legal Basis: Legitimate Interest)

• Improving our website functionality and user experience
• Analysing website traffic and user behaviour
• Preventing fraud and ensuring website security
• Complying with legal obligations and regulatory requirements

Marketing Communications (Legal Basis: Consent)

• Sending newsletters and marketing communications (with your consent)
• Providing relevant content and service updates
• Inviting you to events and webinars related to beauty branding

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We do not sell your personal data. We may share your information with trusted third parties in the following circumstances:

• Service Providers: We work with carefully selected service providers who assist us in delivering our services, such as email marketing platforms, analytics providers, and payment processors
• Legal Requirements: We may disclose your data if required by law, court order, or to protect our legal rights
• Business Transfers: In the event of a merger, acquisition, or business sale, your data may be transferred to the new entity

International Data Transfers

As we operate within the European Union, your personal data is primarily processed within the EU/EEA. If we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy or as required by law. Our data retention periods are:

• Contact enquiries: 3 years from last contact
• Client project data: 7 years from project completion (for legal and tax purposes)
• Marketing data: Until you withdraw consent or 2 years of inactivity
• Website analytics: 26 months (Google Analytics default)

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right of Rectification: Request correction of inaccurate or incomplete data
• Right of Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of processing in certain situations
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Rights Related to Automated Decision Making: Protection against automated decision-making and profiling

To exercise any of these rights, please contact us at privacy@openlatticeora.world or call +352 28232385. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL encryption for data transmission
• Secure hosting and regular security updates
• Access controls and staff training on data protection
• Regular security assessments and monitoring

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "last modified" date.

Contact Information

If you have any questions about this privacy policy or our data protection practices, please contact us:

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD) or your local data protection authority.