Privacy Policy

Lucent Innovation is committed to protecting your privacy and ensuring the security of your personal information.

Last updated: April 30, 2025

Introduction

Lucent Innovation is committed to protecting your privacy and handling your data transparently and securely. This Privacy Policy outlines how we collect, use, share, and protect your personal data, in accordance with the Digital Personal Data Protection (DPDP) Act, 2023, Draft Rules 2025, the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA). This policy applies to all users, clients, and partners across jurisdictions where we operate, including India, the US, EU, and other international locations.

Scope of Data Covered

  • Personal Data (e.g., name, email, IP address)
  • Sensitive Personal Data (e.g., financial or health data)
  • Children's Data (subject to age restrictions)

Data Collection & Consent

How We Obtain Consent:

We only collect data when you explicitly consent, typically through clear checkboxes, opt-in forms, or when entering into service agreements.

Example: "We collect your personal data only after obtaining your consent via checkbox acceptance at the time of form submission."

Privacy Notices:

At the point of data collection, we display a clear notice explaining:

  • Why the data is being collected
  • How long it will be retained
  • Whether it will be shared with any third parties

Data Use & Processing

Legal Basis for Processing:

We process your data under one or more of the following legal bases:

  • Your explicit consent
  • Contractual necessity to deliver our services:
  • Legitimate interest, provided it does not override your rights

AI & Algorithmic Transparency

In instances where we use AI models or automation, we:

  • Inform you how your data is used for training or optimization
  • Offer you opt-out choices wherever applicable

Data Retention & Deletion

Retention Periods:

We retain your data only as long as necessary.

  • User accounts: 2 years post-deactivation
  • Project data: 5 years or as agreed contractually

Deletion Protocol:

You will receive a 30-day prior notification before permanent deletion.
You may download or request your data during this period.

Children’s Data

We do not knowingly collect data from individuals under the age specified by local data protection laws (typically 13, 16, or 18) without verifiable parental consent.
This may include validation via official government ID or other legal verification methods.
Profiling of minors is strictly restricted.

Cross-Border Data Transfers

Data may be transferred outside your home country, including to servers in the United States, European Union, or other regions.

Safeguards:

We ensure that appropriate contractual safeguards, such as Standard Contractual Clauses (SCCs) or DPDP-compliant mechanisms, are in place.

User Rights & Requests

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Download your data in machine-readable formats (e.g., CSV, JSON)

Note: To request these rights, contact us at [legal@lucentinnovation.com]. We aim to respond within 30 days.

Security Measures

We implement robust measures to secure your data, including:

  • Encryption during transmission and storage
  • Anonymization where applicable
  • 72-hour breach notification for high-risk incidents

Our employees undergo annual training on DPDP, GDPR, and data security practices.

Third-Party Sharing

We only share data with trusted vendors who:

  • Sign Data Processing Agreements (DPAs)
  • Comply with DPDP, GDPR, and CCPA standards

Key Partner Categories:

  • Cloud Hosting Services
  • Email & Communication Tools
  • Payment Gateways
  • CRM and Analytics Providers

Updates & Compliance

We review our Privacy Policy biannually or when regulations change.

Key Clauses

  • Consent Withdrawal: "You may withdraw consent at any time via [form/email], without affecting prior lawful processing."
  • Breach Notification: "We will notify regulators and affected users within 72 hours of discovering a data breach deemed high risk."
  • Data Protection Impact Assessments (DPIA): "We conduct DPIAs before initiating any high-risk processing to mitigate privacy concerns."

Summary

Lucent Innovation prioritizes your privacy by ensuring transparency, secure data handling, and full compliance with applicable privacy laws. We encourage you to review this policy periodically and reach out for clarifications.

Have legal concerns?

Our legal team is here to help with any privacy questions.

legal@lucentinnovation.com