Privacy Policy

Last updated: January 2026

Introduction

cyberluxa SARL ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or use our customer retention analytics services.

As a Luxembourg-based company operating within the European Union, we comply with the General Data Protection Regulation (GDPR) and all applicable data protection laws.

Data Controller Information

The data controller for your personal information is:

cyberluxa SARL
Rue Beaumont 63
4223 Esch-sur-Alzette
Luxembourg
Registration Number: RCSB369852
VAT Number: LU36147852

Data Collection

We collect various types of personal data when you interact with our website and services. The data we collect includes:

  • Contact Information: Name, email address, phone number, company name, and business address when you submit enquiries or contact forms
  • Website Usage Data: IP address, browser type, device information, pages visited, time spent on pages, and referral sources
  • Communication Data: Records of correspondence, support tickets, and interactions with our team
  • Technical Data: Information about your use of our analytics services, including system configurations and integration details
  • Marketing Data: Preferences for receiving marketing communications and participation in promotional activities

How We Use Your Information

We use the personal data we collect for various purposes, including how we use your information to provide and improve our services:

  • Service Provision: To deliver our customer retention analytics services, provide technical support, and maintain our systems
  • Communication: To respond to your enquiries, provide customer support, and send service-related notifications
  • Business Operations: To process contracts, manage accounts, and conduct billing and administrative tasks
  • Website Improvement: To analyse website usage, improve user experience, and optimise our online presence
  • Marketing: To send relevant information about our services, industry insights, and promotional content (with your consent)
  • Compliance: To meet legal obligations, resolve disputes, and enforce our agreements

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Consent: When you have given clear consent for specific processing activities
  • Contract Performance: When processing is necessary to fulfil our contractual obligations
  • Legitimate Interests: For business operations, security, and service improvement, balanced against your rights
  • Legal Compliance: When required by applicable laws and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

  • Service Providers: With trusted third-party vendors who assist in providing our services
  • Legal Requirements: When required by law, court order, or regulatory authority
  • Business Transfers: In connection with mergers, acquisitions, or asset sales
  • Consent: When you have provided explicit consent for specific sharing

International Data Transfers

As we operate within the European Union, your data is primarily processed within the EU. If we transfer data outside the EU, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy. Our data retention periods are based on:

  • The nature of the data and services provided
  • Legal and regulatory requirements
  • Legitimate business interests
  • Your consent (where applicable)

Generally, we retain contact and communication data for up to seven years after our last interaction, and website usage data for up to two years.

Your Rights

Under GDPR, you have several rights regarding your personal data:

  • Right of Access: Request copies of your personal data
  • Right of Rectification: Request correction of inaccurate data
  • Right of Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Request limitation of data processing
  • Right to Data Portability: Request transfer of your data
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, please contact us using the information provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication procedures
  • Staff training on data protection practices
  • Incident response and breach notification procedures

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

Privacy Contact:
Email: privacy@cyberluxa.top
Phone: +352 24543280
Address: cyberluxa SARL, Rue Beaumont 63, 4223 Esch-sur-Alzette, Luxembourg

Supervisory Authority

You have the right to lodge a complaint with the Luxembourg data protection authority if you believe your data protection rights have been violated:

Commission Nationale pour la Protection des Données (CNPD)
15, Boulevard du Jazz
L-4370 Belvaux
Luxembourg
Website: cnpd.public.lu