Privacy & Cookies

Data controller: Luxci NV, Belgium. Data-protection contact: privacy@luxci.eu. Luxci has appointed a privacy officer to whom data-subject requests and privacy-related enquiries can be addressed.

— Identification and contact data: name, professional title, company, professional email address, professional phone number, VAT number, business address.
— Account data: username, hashed password, role (installer, architect, specifier, distributor), user preferences, authentication logs.
— Project and quotation data: project name, project address, floor plans, technical drawings uploaded by the user, product selections, quotation lines, discounts, delivery information, and any comments or notes added by the user.
— Commercial and transactional data: orders, invoices, payment status, credit notes, service tickets.
— Technical data: IP address, browser type and version, operating system, referring URL, pages visited, actions performed in the portal, timestamps and device identifiers.
— Communication data: emails, support tickets and messages exchanged with Luxci.

Luxci does not intentionally collect special categories of personal data (such as data revealing racial or ethnic origin, health data, or biometric data). Users are asked not to upload such data through the Services.

Luxci processes personal data for the following purposes:

— Providing access to and operating the Services, including the portal, plan builder and quotation engine.
— Preparing, issuing and following up on quotations, orders, deliveries and invoices.
— Providing pre- and post-sales technical support, including warranty handling.
— Managing the commercial relationship with installers, architects and distributors.
— Complying with legal obligations, in particular accounting, tax, product-liability and anti-fraud obligations.
— Securing the Services, preventing abuse, detecting fraud and ensuring the integrity of our systems.
— Improving the Services through aggregated analytics and, where consent is given, detailed usage analytics.
— Sending commercial and product information to professional contacts, in accordance with applicable rules on direct marketing (opt-out for existing customers on similar products, opt-in for prospects).

Luxci processes personal data on the following legal bases under Article 6 GDPR:

— Performance of a contract (Art. 6(1)(b)) for account management, quotations, orders, deliveries, invoicing and support.
— Compliance with a legal obligation (Art. 6(1)(c)) for accounting, tax and product-safety obligations.
— Legitimate interests (Art. 6(1)(f)) in operating and securing the Services, preventing fraud, managing the commercial relationship, and pursuing business-to-business communications with professional contacts, balanced against the rights and freedoms of data subjects.
— Consent (Art. 6(1)(a)) for non-essential cookies and for marketing communications where required. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

Personal data is retained only for as long as necessary for the purposes for which it was collected. Specifically:

— Account data: for the duration of the account, and up to twenty-four (24) months after closure for evidentiary and support purposes.
— Project and quotation data: for the duration of the project and up to ten (10) years thereafter, in line with Belgian civil-liability and product-liability retention requirements.
— Commercial, accounting and invoicing data: seven (7) to ten (10) years, as required by Belgian tax and accounting law.
— Marketing consents and opt-outs: for as long as necessary to honour the choice.
— Server and security logs: up to twelve (12) months.

Personal data is accessed only by authorised Luxci employees on a need-to-know basis and is shared with the following categories of recipients:

— Processors acting on Luxci's instructions, including cloud hosting and database providers, email delivery providers, customer-support platforms, PDF generation services, accounting software providers, and AI infrastructure providers used to power specific features of the Services. All processors are bound by a written processing agreement in accordance with Article 28 GDPR.
— Logistics and installation partners where necessary to fulfil an order.
— Payment and credit-insurance providers.
— Professional advisors (accountants, lawyers, auditors) under confidentiality obligations.
— Public authorities when required by law or a valid legal request.

Luxci does not sell personal data to third parties.

Personal data is primarily processed within the European Economic Area (EEA). Where a processor is located outside the EEA (for example certain cloud, email or AI providers), Luxci ensures an adequate level of protection through the European Commission's Standard Contractual Clauses, adequacy decisions or other appropriate safeguards under Chapter V GDPR.

Subject to the conditions of the GDPR, data subjects have the right to:

— Access their personal data and obtain a copy.
— Rectify inaccurate or incomplete data.
— Request erasure ("right to be forgotten") where the legal grounds apply.
— Request restriction of processing.
— Object to processing based on legitimate interests or direct marketing.
— Request data portability where processing is based on consent or a contract and is carried out by automated means.
— Withdraw consent at any time, where processing is based on consent.
— Lodge a complaint with a supervisory authority, in particular the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, Belgium.

Requests can be sent to privacy@luxci.eu. Luxci may request additional information to verify the identity of the requester.

Luxci implements appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include encryption of data in transit, access controls and role-based permissions, hardened cloud infrastructure, regular back-ups, audit logging, and staff confidentiality obligations. No system can be guaranteed to be 100% secure, and Luxci cannot warrant absolute security.

The Luxci website and portal use cookies and similar technologies (local storage, session storage). Cookies are small files placed on your device that allow the Services to recognise you and to store certain information.

— Strictly necessary cookies are required to operate the Services (for example authentication, security, load balancing, session management). They cannot be disabled.
— Functional cookies remember preferences such as language, portal layout and recently viewed products.
— Analytics cookies help us understand how the Services are used, in aggregated form, so that we can improve them. These are set only with your consent.
— Marketing cookies may be used to measure the performance of marketing campaigns. These are set only with your consent.

You can manage your cookie preferences at any time through the cookie banner on the website, and you can block or delete cookies through your browser settings. Blocking strictly necessary cookies may affect the availability of the Services.

Luxci may update this Privacy & Cookies notice from time to time to reflect changes in the Services, in the law or in our practices. The "Last updated" date at the top of this page indicates the most recent revision. Material changes will be communicated through the Services or by email where appropriate.