1. Introduction & Data Controller

LoraLogic Ltd (“we”, “our”, or “us”) is committed to protecting and respecting your personal data and privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of applicable data protection legislation, the data controller is:

2. Scope of this Policy

This Privacy Policy explains how LoraLogic Ltd collects, handles, stores, and protects personal information obtained through our website (https://loralogic.com), direct email correspondence, business discovery consultations, and the provision of digital infrastructure and consultancy services.

3. Information We Collect

We collect and process personal data strictly in proportion to our commercial operations:

• Inquiry & Communication Data: When you initiate contact with us via email (contact@loralogic.com) or consultation requests, we collect your name, business email address, telephone number, organisation name, job title, and the scope of your inquiry.
• Technical & Server Infrastructure Data: When you visit our website, our web servers automatically log standard technical information, including your Internet Protocol (IP) address, browser type and version, operating system, referrer URL, date and time of request, and HTTP status codes. These logs are maintained strictly for network resilience, intrusion detection, and diagnostic integrity.
• Cookies & Local Preferences: We use essential technical cookies required for website operation and session management, as well as preference cookies to record your consent choices via our GDPR cookie compliance framework. We do not deploy intrusive third-party behavioural advertising trackers.

4. Lawful Bases for Processing (UK GDPR Article 6)

Under the UK GDPR, we rely on the following lawful bases to process your personal data:

• Legitimate Interests (Art. 6(1)(f)): To evaluate and respond to commercial inquiries, maintain server performance and cybersecurity, protect our systems against unauthorised access, and refine our service architecture.
• Contractual Necessity (Art. 6(1)(b)): To take necessary preliminary steps prior to entering into a master services agreement, technical engagement, or software consultancy contract.
• Legal Obligation (Art. 6(1)(c)): To maintain statutory corporate, financial, and tax records in compliance with UK company law.
• Consent (Art. 6(1)(a)): Where you have provided unambiguous consent for specific technical updates or notifications, which may be withdrawn at any time.

5. Data Retention & Storage Security

We implement enterprise-grade technical and organisational security measures to safeguard personal data against unauthorised disclosure, alteration, or destruction. Server communications are encrypted in transit via Transport Layer Security (TLS).

We retain technical server logs for a maximum period of 90 days for diagnostic and security audits. Commercial inquiry data is retained for the duration of the prospective client relationship and up to seven (7) years following contract completion in accordance with UK statutory accounting obligations.

6. Third-Party Processors & International Transfers

We do not sell, rent, or lease personal information to third parties. Data is processed exclusively by verified infrastructure partners (including UK/EU data centres, enterprise hosting providers, and secure mail relays) that operate under strict data processing agreements.

Where any international data transfer occurs outside the United Kingdom, we ensure appropriate safeguards are established, such as UK International Data Transfer Agreements (IDTAs) or European Commission Standard Contractual Clauses (SCCs) recognised by the UK Information Commissioner’s Office.

7. Your Statutory Rights under UK GDPR

As a data subject located in the United Kingdom or European Economic Area, you hold statutory rights regarding your personal information:

• Right of Access: Request confirmation of whether we hold your personal data and obtain a copy.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure (“Right to be Forgotten”): Request deletion of data where retention is no longer justified.
• Right to Restriction: Request suspension of data processing during dispute verification.
• Right to Data Portability: Request transmission of your structured personal data to another controller.
• Right to Object: Object to data processing predicated upon legitimate interests.

To exercise any of these statutory rights, please submit a written request to contact@loralogic.com. We respond to all verified statutory requests within one calendar month without charge.

8. Supervisory Authority & Complaints

You have the right to lodge a complaint with the UK supervisory authority for data protection issues:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
Helpline: 0303 123 1113 • Website: https://ico.org.uk

9. Policy Updates

LoraLogic Ltd reserves the right to amend this Privacy Policy to reflect evolving technical practices or statutory changes. The updated version will be published on this page with an amended revision date.