Privacy Policy

Lumix Humanitarian Consulting Ltd is a consultancy registered in the Republic of Cyprus with the Department of the Registrar of Companies, Ministry of Energy, Commerce and Industry, under registration number HE474353, with its registered office in Nicosia, Cyprus. Lumix Humanitarian Consulting Ltd is the data controller for personal data collected through this website. For any privacy query, or to exercise your rights, contact us at hello@lumixconsulting.co.

We collect personal data only when you submit it directly through one of two forms on this site:

• Contact form: name, organisation (optional), email address, and your message.
• Consultant application form: full name, nationality, country of residence, languages spoken, areas of expertise, CV (PDF), LinkedIn profile URL (optional), availability, work modality, locations you are unavailable for (optional), and a statement of interest.

Providing this data is voluntary, but we cannot respond to an enquiry or assess an application without it. Please do not include special category data (such as health information) in your message or application unless it is necessary.

• Contact form: to respond to your enquiry, on the basis of our legitimate interest in operating our consultancy (Article 6(1)(f) GDPR).
• Application form: to assess your suitability for current or future assignments and to maintain our associate talent pool, on the basis of your consent (Article 6(1)(a) GDPR), given actively before you submit.

Submitted data is accessible to:

• LUMiX co-founders, who review enquiries and applications directly.
• Resend, our email delivery provider, which routes form submissions to our inbox.
• Our website hosting provider, which processes data as part of operating this site.

These providers act as processors on our behalf under data processing agreements. We do not sell personal data, and we do not share it with any other third party unless required by law.

• Contact form enquiries: up to 12 months from our last exchange with you, then deleted.
• Consultant applications: up to 24 months as part of our associate talent pool, after which we delete your data or contact you to renew your consent.

You can ask us to delete your data at any time before these periods end.

Under the EU GDPR and applicable data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data
• Object to processing based on legitimate interest
• Withdraw consent at any time (for application data), without affecting the lawfulness of processing before withdrawal
• Lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy), or your local supervisory authority

To exercise any of these rights, contact us at hello@lumixconsulting.co. We respond within one month.

This website does not use cookies or tracking analytics. No consent banner is shown because none is required.

Our email delivery and hosting providers are based in the United States, which means form submissions may be transferred outside the European Economic Area. These transfers are protected by Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

We take appropriate technical and organisational measures to protect personal data, including encrypted transmission (HTTPS), access limited to the co-founders, and secure storage of applications.

We may update this policy from time to time. Material changes will be reflected in the “Last updated” date above.