Privacy & Data Protection
Privacy Policy
LostWoods™ is committed to protecting the privacy of its users and handling personal data responsibly. This page explains how personal information is collected, used, stored, and protected in accordance with applicable data protection regulations. Transparency and data minimisation guide our approach.
Data Controller
The data controller responsible for the processing of personal data is:
LostWoods™, Luxembourg.
Personal Data Collected
LostWoods™ may collect the following personal data:
- identification data (name, surname),
- contact data (email address),
- professional data (company name, role),
- message content transmitted via forms or direct contact,
- any files you choose to attach when contacting us (for example, your diagnostic report or a project brief),
- results from our online design diagnostic (your overall score and priority area), associated with your email address when you choose to receive your report by email,
- newsletter subscription data (email address), where you opt in.
No sensitive data is collected.
Legal Basis for Processing
Personal data is processed on the basis of:
- user consent,
- legitimate interest in responding to professional inquiries,
- compliance with legal obligations.
Purpose of Processing
Personal data is collected exclusively for:
- responding to contact requests,
- managing professional exchanges,
- evaluating potential collaborations,
- sending you your design diagnostic report and following up on your priorities, where you have provided your email address and consent,
- scheduling and managing calls or meetings you request with us,
- sending our newsletter and updates about LostWoods, where you have opted in (you can unsubscribe at any time),
- ensuring website security and integrity.
Data Retention
Personal data is retained only for the duration necessary to fulfill the purposes described above, unless a longer retention period is required by law.
Data Recipients
Personal data is not sold or transferred to third parties for their own purposes. Data may be processed by technical service providers strictly on our behalf and for operational purposes, under contractual confidentiality and data protection obligations. These providers include:
- Brevo (Sendinblue SAS, European Union) — newsletter subscriptions and management of diagnostic leads (your email address, and your diagnostic score and priority area); you can unsubscribe at any time via the link included in every email,
- Resend — delivery of the emails sent through our contact form, including any files you attach,
- Calendly — scheduling of the calls or meetings you book with us,
- our hosting provider — website hosting, delivery and security.
Where a provider processes data outside the European Union, appropriate safeguards (such as the European Commission's Standard Contractual Clauses) are in place.
Data Security
LostWoods™ implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure.
User Rights
In accordance with GDPR, users have the right to:
- access their personal data,
- rectify inaccurate data,
- request erasure,
- object to processing,
- request data portability.
Requests can be sent to: info@lostwoods.lu