Privacy notice
How we look after personal data
Last updated 25 August 2026. This notice explains how Lucasia Ltd uses personal data collected through lucasia.ai and related enquiries. Signed client contracts and data processing terms take precedence for Client Data.
Privacy notice in full
Who we are
The data controller is Lucasia Ltd, a company registered in England and Wales with company number 13936300. Registered office: Seven, Grange Lane, Pitsford, Northampton, England, NN6 9AP. Correspondence address: 21 Red Kite Way, Raunds, Wellingborough, NN9 6FG. We process personal data under UK GDPR and the Data Protection Act 2018. We are registered with the Information Commissioner's Office under reference ZB958849.
How to contact us
For privacy requests, email laura@lucasia.ai or hello@lucasia.ai, or write to the correspondence address above. You can also call +44 1933 391 728.
What personal data we collect
If you use the contact form or email us, we collect the details you provide. That typically includes name, email address, company name, phone number, and your message. If you call or write to us, we keep the contact details needed to respond. We do not collect payment card data through this website.
Why we use personal data
We use enquiry data to respond to you, to assess whether we can help, and to keep a record of the conversation. The legal basis is our legitimate interests in running a professional services business, and, where you submit the form, your request to enter into correspondence. We do not use website enquiry data for automated decision making.
Who we share data with
We do not sell personal data. The public website is hosted on Cloudflare. Contact form submissions are processed by Formspree so we can receive them. Email to Lucasia mailboxes is handled by our email provider. We use other professional tools (for example accounting and document tools) only where needed to run the business. We share data with a third party only where that is necessary for these purposes, required by law, or agreed with you.
International transfers
Some providers may process data outside the United Kingdom. Where that happens, we rely on the provider's appropriate safeguards, such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision where one applies.
How long we keep data
We keep enquiry data only for as long as needed to respond, to maintain a professional record, and to meet legal, tax, or insurance requirements. We then delete or anonymise it. Retention for a paid engagement follows the contract and our statutory duties.
Your rights
You may request access to your personal data, correction, deletion, restriction, objection, or data portability, where those rights apply under UK GDPR and the Data Protection Act 2018. You may also complain to the Information Commissioner's Office at ico.org.uk. We would rather you contact us first so we can try to put things right.
Cookies
This website uses only cookies that are needed for the site to work, such as display or session preferences. We do not currently use advertising or analytics cookies on lucasia.ai. If that changes, we will update this notice.
Client work and Client Data
Where we process Client Data under a client contract, the Client remains the controller of that data and Lucasia acts as processor, as set out in that contract or data processing terms. The Client owns Client Data. Lucasia secures the service it provides. The Client controls its own users, instructions, and lawful basis for its processing.
Changes to this notice
We may update this notice when our processing or the law changes. The date at the top of this page shows when it was last updated.