Privacy policy

Last updated: 11 October 2026

In short

We use the details you send through our forms to answer you, prepare quotes and assess distributor applications. Nothing else.
The site has no accounts and no online payments, and we do not sell your data or use it for advertising.
In the European Economic Area and the United Kingdom, statistics and marketing cookies are only used with your consent. The cookies the site needs to work are always on.
You can ask us at any time to see, correct or delete your data, and you can complain to the Spanish data protection authority (AEPD).

Who is responsible for your data

LuzLed runs luzgroup.es and is responsible for the personal data described here. For anything about your data, write to us at info@luzgroup.es or through our contact page.

What we collect

We only collect what you send us and what the website records when you use it.

Contact form: the topic, your name, company, email address, country and message, and your phone number if you give it.
Quote request: your name, company, email address and country, the products and quantities in your quote list, and, if you give them, your phone number, role, project details and message.
Distributor application: your company, website, country, the area you cover, your type of business and the product groups you are interested in, and your name, job title, email address, message and, if you give it, phone number.
When you visit the site: technical data such as your IP address, browser, device and the pages you open, recorded by our store platform, and the cookies described in our cookie policy.
Spam protection: when you send a form, a check runs to tell people from automated programs; it uses your IP address and data about your browser and how the page is used.

Fields marked as optional can be left empty. Without the others we cannot answer your message, prepare your quote or consider your application.

Why we use it and on what legal basis

To answer your questions and messages: our legitimate interest in replying to people who write to us (article 6.1.f of the GDPR).
To prepare and send quotes: steps you ask us to take before a possible contract (article 6.1.b).
To assess distributor applications and manage a business relationship that follows: steps you ask us to take before a contract, and the contract itself (article 6.1.b).
To keep the site working and secure, and to stop spam and fraud: our legitimate interest in a safe, working website (article 6.1.f).
Statistics and marketing cookies: your consent (article 6.1.a), which you can withdraw at any time without affecting what was done before.
To meet legal obligations, such as keeping commercial and tax records once we do business together (article 6.1.c).

We do not make decisions about you by automated means alone, and we do not build profiles of you.

Who receives your data

We do not sell your data. We share it only with the providers that run the site for us, under contracts that oblige them to protect it and use it only on our instructions:

Shopify, our store platform, which hosts the site and delivers form messages.
Our email provider, through which we receive and answer your messages.
hCaptcha (Intuition Machines, Inc., United States), which protects our forms from spam.

Shopify also processes some data about visits for its own purposes, as an independent controller, under the Shopify privacy policy. We disclose data to public authorities only when the law requires it.

Transfers outside the European Economic Area

Some of these providers, or their own providers, process data in Canada and the United States. These transfers rely on an adequacy decision of the European Commission (Canada, and companies certified under the EU and US Data Privacy Framework) or on the standard contractual clauses approved by the Commission.

How long we keep it

Messages, quote requests and applications: while we deal with them and, if no business relationship follows, for up to two years after our last contact, in case you write again about the same matter.
Business relationships: for as long as the relationship lasts, and then for the periods the law requires, such as six years for commercial records under the Spanish Commercial Code.
Cookies: for the periods given in the cookie policy.

Your rights

You can ask us to:

tell you whether we hold data about you and give you a copy (access);
correct data that is wrong or incomplete (rectification);
delete your data (erasure);
limit how we use it (restriction);
stop using it where we rely on our legitimate interest (objection);
send it to you or to another company in a common format (portability).

Where we rely on your consent, you can withdraw it at any time. To use any of these rights, write to us at info@luzgroup.es or through our contact page; we may ask you to confirm your identity, and we reply within one month.

If you think we have not handled your data properly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, or to the authority of the country where you live or work.

Security

The site is served over an encrypted connection, and access to your data is limited to the people who need it to answer you. No system is completely secure, so please do not send sensitive information through our forms.

Children

The site is meant for businesses and professionals. We do not knowingly collect data from anyone under 18.

Changes to this policy

We update this policy when what we do with data changes or when the law requires it. The date at the top shows the latest version.

Quote list