Privacy Policy

Livana Group Ltd ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website at livana.io or use our services.

Company Details: Livana Group Ltd, United Kingdom
Contact: hello@livana.io

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when you:

• Submit enquiries through our contact form (name, email, company name, phone number, message, service interest)
• Sign up for our newsletter (email address)
• Engage our services (contact details, company information, project requirements)

1.2 Information Automatically Collected

When you visit our website, we may automatically collect:

• Technical information (IP address, browser type, device type, operating system)
• Usage data (pages visited, time spent on pages, referring website, date and time of access)
• Cookie data (as described in Section 4)

2. How We Use Your Information

2.1 Legal Basis for Processing (UK GDPR)

We process your personal data on the following legal bases:

• Consent: When you opt in to receive newsletters or marketing communications
• Contract: To provide services you have requested
• Legitimate interests: To improve our website, respond to enquiries, and provide customer support

2.2 Purposes

We use your information to:

• Respond to your enquiries and provide customer support
• Deliver accessibility services you have engaged us for
• Send you newsletters and updates (only with your explicit consent)
• Improve our website and services through usage analytics
• Comply with legal obligations
• Prevent fraud and ensure website security

3. Third-Party Services

We use the following third-party services to process your data:

• Resend: For handling contact form submissions and email communications. Their privacy policy is available at resend.com/legal/privacy-policy
• Vercel: For website hosting and infrastructure. Their privacy policy is available at vercel.com/legal/privacy-policy

We do not sell your personal data to third parties. Data is only shared with service providers necessary for our operations, and they are contractually required to protect your information.

4. Cookies and Tracking

4.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide and improve our services.

4.2 Cookies We Use

• Essential cookies: Required for the website to function properly (e.g., session management, security)
• Analytics cookies: Help us understand how visitors use our website (may be added in future)
• Preference cookies: Remember your settings and preferences (e.g., dark mode)

4.3 Managing Cookies

You can control or disable cookies through your browser settings. However, disabling essential cookies may affect website functionality. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block cookies from specific websites
• Block all cookies

5. Data Retention

We retain your personal data only for as long as necessary:

• Contact form submissions: 2 years from last contact
• Newsletter subscriptions: Until you unsubscribe
• Client project data: Duration of engagement plus 6 years (for legal and accounting purposes)
• Analytics data: 26 months (if implemented)

After the retention period, we securely delete or anonymise your personal data.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure hosting infrastructure
• Access controls and authentication
• Regular security reviews and updates

While we take data security seriously, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your data.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Data Processing Agreements with service providers
• Adherence to UK GDPR adequacy decisions
• Standard contractual clauses where applicable

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right to access: Request a copy of your personal data we hold
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: Request limitation on how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: Withdraw consent at any time where we rely on consent

To exercise any of these rights, please contact us at hello@livana.io. We will respond within one month.

9. Children's Privacy

Our website and services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

11. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Last updated: January 2026