Privacy Policy

1. Introduction

Luno Xyrem ("we," "us," or "our") is committed to protecting the privacy of individuals who visit our website or use our services. This Policy describes the categories of information we may collect, how that information may be used and shared, and the choices available to you regarding your information. By accessing or using our website, you acknowledge that you have read and understood this Policy.

2. Information We Collect

We may collect information in the following general categories. The exact data points depend on how you interact with our website and services.

• Contact details Name, email address, phone number, and company information submitted through forms.
• Account data Credentials and preferences associated with any account you create.
• Usage data Pages visited, features used, timestamps, and interaction patterns on our website.
• Device data Browser type, operating system, IP address, and general location inferred from network information.
• Communications Records of correspondence when you contact us through forms, email, or other channels.

3. How We Use Information

We may use the information described above to:

• Operate services Provide, maintain, and improve the features of our website and platform.
• Communicate Respond to inquiries, send administrative notices, and provide requested information.
• Security Detect, investigate, and prevent fraudulent or unauthorized activity.
• Analytics Understand usage trends and improve content, layout, and functionality.
• Legal compliance Meet obligations under applicable laws, regulations, or lawful requests.

4. Legal Basis for Processing

Where required by applicable data protection law, we rely on one or more legal bases to process personal information, which may include your consent, the necessity of processing to perform a contract with you, compliance with a legal obligation, or our legitimate interests in operating and improving our services. The applicable basis depends on the specific context in which information is collected and used.

5. Sharing of Information

We do not sell personal information. We may share information in limited circumstances, such as:

• Service providers Vendors who perform functions on our behalf, such as hosting, analytics, or customer support tools.
• Legal requirements Where disclosure is required to comply with law, regulation, legal process, or governmental request.
• Business transfers In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.
• Consent Where you have directed us to share information with a third party.

6. Data Security

We implement administrative, technical, and organizational measures designed to protect information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security of any information you provide.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. Criteria used to determine retention periods include the duration of any ongoing relationship, legal obligations, and applicable statutes of limitation.

8. Your Rights and Choices

Depending on your location and applicable law, you may have rights regarding your personal information, which may include the ability to:

• Access Request confirmation of and access to the personal information we hold about you.
• Correction Request that inaccurate or incomplete information be corrected.
• Deletion Request deletion of personal information, subject to certain exceptions.
• Objection Object to or restrict certain types of processing.
• Portability Request a copy of your information in a portable format, where applicable.

To exercise any of these rights, please contact us using the details on our Contact page. We may need to verify your identity before responding to certain requests.

9. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to support functionality, remember preferences, and analyze usage. You can typically control cookies through your browser settings; disabling certain cookies may affect the functionality of the website. Where required by law, we will request your consent before placing non-essential cookies.

10. International Data Transfers

Information we collect may be transferred to, stored, and processed in countries other than the one in which it was originally collected. Where such transfers occur, we aim to apply appropriate safeguards consistent with applicable data protection requirements.

11. Children's Privacy

Our website and services are not directed to individuals under the age of majority in their jurisdiction of residence, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

12. Third-Party Links

Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of such third parties, and we encourage you to review their respective privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by a revised "Last updated" date. We encourage you to review this Policy periodically.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please reach out via our Contact page. We will do our best to respond to legitimate inquiries in a reasonable timeframe.