Privacy Policy.
What we collect
When you request a Growth Opportunity Check, we collect your name, work email, clinic name, clinic website, selected growth priority and limited campaign-source data. We create a request reference and may record delivery, quality-review and follow-up status. We also process public business information from the website you submit.
Do not send patient information
PracticeLuma does not require patient records, diagnoses, treatment details or other health information for this form. Do not submit special-category personal data, passwords or payment-card information.
Why and on what basis we use information
- To provide and follow up on the check you requested and take steps toward a service agreement.
- To operate, secure and measure the service, prevent duplicate or abusive submissions and maintain an audit trail, based on our legitimate interests.
- To meet accounting, tax, legal and compliance duties where required by law.
The operational follow-ups relating to your requested check do not subscribe you to unrelated marketing. Any separate promotional mailing requires an appropriate lawful basis and includes an opt-out.
Who processes information
We use vetted infrastructure, email-delivery and AI service providers only as needed to operate the service. This may include Cloudflare for hosting and security, Brevo for transactional email and contact handling, and Google Gemini for assisted analysis. AI output is subject to quality controls and may be held for human review. We do not sell personal information.
International transfers
Some providers may process data outside Estonia or the European Economic Area. Where required, we rely on an adequacy decision, standard contractual clauses or another lawful transfer mechanism and apply appropriate safeguards.
How long we keep information
Enquiry and audit records are normally kept for up to 24 months after the last relevant interaction, unless a shorter period is sufficient or a longer period is required for a dispute, security incident or legal duty. Contract, invoice and accounting records are retained for the period required by Estonian law. Suppression records may be kept as needed to respect an opt-out.
Security
We use access controls, encrypted transport, service authentication, input validation, quality gates and audit records. No online system is risk-free, so please send only the minimum business information requested.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where processing relies on consent. Contact hello@practiceluma.com. You may also complain to the Estonian Data Protection Inspectorate or your local supervisory authority.
Cookies and analytics
PracticeLuma uses essential security technology and privacy-limited first-party analytics. Analytics records the page path and allows only sanitised UTM campaign values; it does not intentionally store form names, email addresses or clinic URLs in analytics events.
Changes
We may update this policy when the service or legal requirements change. The effective date above identifies the current public version.