Website Privacy Policy

Scope of this policy

This policy applies only to luca.health and its subdomains. It does not cover the data we process when you use the Luca platform (apps, dashboards, clinical workflows). For that, see the Platform Privacy Policy.

1. Who we are

Luca Health Limited, registered in England & Wales (No. 14060836) is the data controller for personal data collected through this website. We can be reached at info@luca.health or Missionworks, 41 Iffley Road, London W6 0PB, United Kingdom.

2. What we collect

When you visit this website we may collect:

• Information you submit through forms — for example your name, email, organisation and message when you use the contact form.
• Analytics data about how you use the site (pages viewed, referring source, approximate location, device and browser) when you accept analytics cookies.
• Standard server logs (IP address, request timestamp, user-agent) collected by our hosting and CDN providers for security and reliability.

3. Cookies and analytics

We use Google Analytics 4 to understand how the site is used. Analytics cookies only load after you accept them in the consent banner. If you decline, no analytics cookies are set and no usage events are sent. You can change your decision at any time by clearing the consent stored in your browser. For full details see our Cookie Policy.

4. How we use your information

We use the information described above to respond to enquiries you send us, to operate and secure the website, and to understand and improve how visitors interact with our content. We do not use website analytics data to identify individual visitors.

5. Legal basis

Under the UK GDPR and EU GDPR we rely on: your consent (for analytics cookies and any marketing communications); our legitimate interests in operating, securing and improving the website; and where you contact us, the steps necessary to respond to your enquiry.

6. Sharing

We do not sell personal data. We share limited data with vetted service providers who help us run the website and analyse traffic — for example hosting, CDN, anti-bot protection (Cloudflare Turnstile), email delivery, and Google Analytics. They process data on our behalf under written contracts.

7. Retention

Contact-form submissions are kept for as long as needed to respond to your enquiry and a reasonable period afterwards. Analytics data is retained according to the default Google Analytics retention period unless we shorten it. Server logs are retained by our infrastructure providers for short, security-related windows.

8. Your rights

You have the right to access the personal data we hold about you, ask us to correct or delete it, object to or restrict its processing, and request portability. You can also lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

9. International transfers

Some of our service providers (notably Google Analytics) may process data outside the UK and EU. Where this happens we rely on Standard Contractual Clauses or other safeguards approved under UK and EU GDPR.

10. Changes to this policy

We may update this policy occasionally. The "Effective date" above will reflect when the latest version took effect; material changes will be highlighted on the website.

11. Contact us

Questions about this policy or your data can be sent to info@luca.health, or by post to Missionworks, 41 Iffley Road, London W6 0PB, United Kingdom.