Legal

Privacy Policy

What personal data Lura+ handles, why, and the choices you have.

Last updated

1. Who is responsible

Your company decides what employee and candidate data goes into its Lura+ workspace. For that data your company is the controller and LuraPlus is the processor, acting only on your company's instructions.

For the data we collect to run our own business — such as the account details of the person who signs up, billing contacts and visitors to our website — LuraPlus is the controller.

2. Data we handle

  • Account data: names, work email addresses, roles and sign-in activity.
  • Workspace data: employee records, leave, timesheets, appraisals, onboarding checklists, job applications and documents your users add.
  • Billing data: company name, billing contact and plan. Card and bank details are held by our payment provider, not by us.
  • Usage and device data: pages used, browser type and error logs, to keep the service secure and working.

3. How we use it

  • to provide, secure and support the service your company signed up for;
  • to bill for the plan you choose and send service and account emails;
  • to understand how the product is used so we can improve it;
  • to meet legal obligations.

We don't sell personal data, and we don't use workspace data to advertise to anyone.

4. Who we share it with

We use a small number of service providers (sub-processors) under contracts that require them to protect the data:

  • cloud hosting and email delivery (Amazon Web Services);
  • payment processing (Stripe);
  • any further providers we list here before they start processing workspace data.

Inside a workspace, what each user can see is set by the roles and permissions your admins assign.

5. Security

Each workspace's data is kept separate from every other workspace. Data is encrypted in transit, access is limited to staff who need it,.

6. How long we keep it

We keep workspace data while your company uses Lura+. If a trial ends without a plan, the workspace turns read-only and nothing is deleted. When a workspace is closed, we delete its data after a reasonable period, except where the law requires us to keep records such as invoices.

7. Your rights

Depending on where you live you may have the right to access, correct, export or delete your personal data, or to object to how it is used.

If your data is in your employer's workspace, contact your employer's admin first — they control that data. We will help them respond.

8. Cookies and local storage

We use the cookies and browser storage needed to sign you in, remember your workspace and keep the service secure. We don't use third-party advertising cookies.

9. International transfers

Our providers may process data outside your country. Where that happens we rely on appropriate safeguards, such as standard contractual clauses.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version, and we will tell workspace admins about material changes.

11. Contact

Privacy questions or requests: legal@luraplus.io.