Privacy Notice

Who is responsible

Lumos Finance LTD is responsible for the personal information it processes in connection with the Lumos website and enquiries addressed to the company. This notice concerns lumosfinance.sbs. It does not replace a lender’s or another service provider’s privacy notice.

For privacy enquiries, put “Privacy request” in the subject line of your email. Please do not include account passwords, payment-card security codes or unnecessary identity documents.

Information you provide

The contact form requests your first name, last name, email address and telephone number. It also records your acknowledgement of this notice and the Terms of Use while checking the submission. It does not request bank details, income, credit history, identification numbers or documents.

Information sent by email or discussed over the phone can also include the content of your enquiry and your preferred reply details. Provide only the information needed to explain the matter. If further verification is necessary, ask how to provide it securely before sending sensitive documents.

How the website form handles information

The website checks the format of the contact information you submit. The current online form does not retain the contact details or forward them to a lender, email inbox or customer-management system. If online submission is unavailable, the form will tell you that your details have not been saved or sent and will provide direct contact options.

This form does not perform credit scoring or make automated lending decisions. It does not create an account or enrol you in marketing. An acknowledgement of this notice is not consent to unrelated advertising or the distribution of your details to unspecified lenders.

Purposes and lawful grounds

Where personal information is used to respond to an enquiry, it is used to understand the request, communicate with you and provide relevant information. Depending on the request, this may involve steps requested by you before entering a service arrangement or legitimate interests in handling business correspondence.

Security and abuse prevention may rely on legitimate interests in protecting the website and its users. Information required to meet an applicable legal obligation is handled on that basis. If a separate use requires consent, that permission should be requested specifically, and you may withdraw it for future processing.

Technical information, consent and cookies

Visiting a website necessarily sends technical information, such as an IP address and request details, to the hosting infrastructure. Hosting or security providers may handle access records to deliver and protect the service. Avoid including personal data in a page URL.

We process technical request data for our advertising analytics and traffic routing, using a service provider, when the entry page is requested. This happens before the cookie banner appears and is not controlled by its optional browser-cookie preferences. A necessary preference cookie records your browser-cookie choice for up to 180 days. This can include your IP address, user-agent, requested URL and query parameters, referring page, request headers and any cookies included with the request. The service response determines whether a page is displayed or your browser is redirected. Do not include sensitive information in URLs. This processing is separate from the contact form; the PHP form itself does not forward its submitted contact fields to the traffic-processing provider. See the Cookie Notice for the scope of this statement. Third-party sites reached through links operate under their own notices.

Sharing and international processing

The online form does not currently transmit its submitted contact fields to lenders or marketing partners. Separately, the website entry page transmits request metadata to the traffic-processing provider for our advertising analytics and traffic routing. Redirect destinations may operate their own privacy policies. If a future service requires an introduction or data transfer, you should receive information about the recipient, purpose and relevant privacy terms before that transfer occurs.

Hosting, email and communications providers may necessarily process information when delivering those services. Contact Lumos for information about the provider handling a particular communication and any applicable international-transfer arrangements. A link to another organisation does not give it your form contents automatically.

Retention and security

The online form does not create a retained enquiry record. Information that you separately send through email or other communications may need to be kept for the enquiry, follow-up, complaints handling or an applicable legal obligation. The necessary duration depends on the purpose, the nature of the record and the legal requirements that apply.

For a record-specific retention or deletion request, contact [email protected]. Do not assume that a failed form submission has created an enquiry that a member of staff will review.

Use a trusted device and connection when contacting any financial service. No internet communication is entirely risk-free. Please report suspected misuse of the Lumos name or an unexpected request for sensitive information.

Your rights and complaints

Depending on the applicable data-protection law and the circumstances, you may have rights to access your information, correct inaccuracies, request deletion, restrict processing, object to particular processing or receive a portable copy. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.

To exercise a right, email [email protected] and describe your request. Proportionate identity checks may be needed to protect your information. Some rights have exceptions, including where records must be retained by law.

If UK data-protection law applies, you may raise a concern with the Information Commissioner’s Office. You may also have a right to contact the relevant authority in your own jurisdiction.

Changes to this notice

This notice describes the website’s current processing. It must be reviewed when enquiry delivery, lender introductions, analytics or other processing changes. Material new purposes should be explained before they begin, with consent obtained where required.

Last updated: 13 October 2026.