Last updated: April 13, 2026
Lense & Lumen Advisory Group (“Lense & Lumen”, “we”, “us” or “our”) respects your privacy and is committed to protecting any personal information you share with us through our website at lladvisorygroup.com. This policy explains what we collect, how we use it and the rights you have under applicable data protection law including the EU General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for your personal information is the administrator of the Lense & Lumen website. You can reach us through the contact form on our website or by using the contact details listed on our Contact page.
2. Data Protection Officer
We have not appointed a Data Protection Officer, as our processing activities do not meet the thresholds set out in Article 37 of the GDPR. Any questions about privacy may be directed to the website administrator using the contact details above.
3. Personal Data We Collect
We collect the following categories of personal data.
Contact information you provide voluntarily. When you fill out a form or otherwise get in touch with us, we may collect your name, email address and phone number.
Technical and usage data collected automatically. When you visit our website, Google Analytics collects information such as your IP address, browser type, device type, pages viewed, time spent on pages and referring website.
We do not collect financial or payment information through this website, and we do not process any special categories of sensitive personal data.
4. How We Use Your Data and Legal Basis
We use contact information solely to respond to inquiries you submit through our website. The legal basis for this processing is your consent under Article 6(1)(a) of the GDPR, which you provide by submitting a form.
We use technical and usage data gathered through Google Analytics to understand how visitors find and interact with our site so that we can improve it. The legal basis for this processing is also your consent, obtained through our cookie banner when you first visit the site.
5. Cookies and Tracking Technologies
Our website uses Google Analytics cookies to measure traffic and site usage. These are analytics cookies set by Google that help us understand visitor behaviour in aggregate.
We ask for your consent before these cookies are placed on your device. If you do not consent, Google Analytics will not load. At present we do not offer a separate preference centre to adjust individual cookie settings after your initial choice. You can withdraw consent at any time by clearing your browser cookies and declining when the banner reappears, or by installing the Google Analytics Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.
6. Third Parties Who Receive Your Data
We share limited data with Google LLC, the provider of Google Analytics, for the purpose of generating traffic insights and usage reports. Google is headquartered in the United States and processes data on servers located in various countries around the world.
We do not sell your personal data, and we do not share it with advertisers or marketers.
7. International Data Transfers
Because Google Analytics is operated by a company based in the United States, some of your data may be transferred outside the European Economic Area. These transfers are covered by the EU-US Data Privacy Framework, under which Google is certified, together with Standard Contractual Clauses approved by the European Commission where applicable. These mechanisms are designed to ensure that your data receives an equivalent level of protection when processed abroad.
8. How Long We Keep Your Data
Contact information submitted through our forms is retained for as long as needed to respond to your inquiry and for a reasonable period afterwards (typically up to 24 months) in case of follow-up questions. After that point the information is deleted or anonymised.
Google Analytics data is retained for 14 months by default, after which it is automatically deleted from Google’s servers.
9. Security
We rely on the security measures built into Google Analytics and our website hosting environment to protect your data in transit and at rest. These include encryption of data transmitted between your browser and our servers using HTTPS, access controls on administrative accounts and regular software updates. No method of transmission over the internet is completely secure, but we take reasonable steps to safeguard the information you share with us.
10. Your Rights
Under the GDPR and similar laws, you have the following rights regarding your personal data:
- Right of access. You can request a copy of the personal data we hold about you.
- Right to rectification. You can ask us to correct inaccurate or incomplete information.
- Right to erasure. You can ask us to delete your personal data in certain circumstances.
- Right to restrict processing. You can ask us to limit how we use your data.
- Right to data portability. You can ask for your data in a structured machine-readable format.
- Right to object. You can object to processing based on legitimate interests.
- Right to withdraw consent. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
- Right to lodge a complaint. You can file a complaint with your local data protection authority.
11. How to Exercise Your Rights
To exercise any of these rights, please contact us through the form on our website or by email using the details on our Contact page. We may ask you to verify your identity before acting on your request, usually by confirming details associated with the original submission. We aim to respond within 30 days of receiving a valid request in line with Article 12 of the GDPR. If your request is particularly complex we may extend this period by up to two additional months and will let you know in advance if that becomes necessary.
12. Automated Decision-Making and Profiling
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
13. Children’s Privacy
Our website is not directed to children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
14. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the “Last updated” date shown at the top of this page. We encourage you to review this policy periodically so that you stay informed about how we protect your information.
15. Contact Us
If you have questions about this privacy policy or how we handle your personal data, please reach out through the contact form on our website.