Privacy Policy

Lumina Bank plc is the data controller for personal data collected through our website and banking app. Our registered office is 1 Lumina Square, London, EC2V 8RF.

If you have any questions about how we use your data, contact us at privacy@luminabank.online.

• ‣Identity data: name, date of birth, gender, nationality
• ‣Contact data: email address, phone number, postal address
• ‣Identity verification: government-issued ID documents (for KYC)
• ‣Financial data: account balances, transactions, payment history
• ‣Tax residency and National Insurance / Tax reference information
• ‣Device and technical data: IP address, browser type, operating system
• ‣Usage data: pages visited, features used, login times

• ‣To open and operate your bank account
• ‣To verify your identity and comply with Know Your Customer (KYC) obligations
• ‣To detect and prevent fraud and financial crime
• ‣To comply with legal and regulatory obligations (FCA, HMRC, AML regulations)
• ‣To process payments and transfers on your behalf
• ‣To send you service notifications and account alerts
• ‣To improve our products and services through analysis

We rely on the following legal bases under UK GDPR Article 6:

• ‣Performance of a contract: to provide banking services you have requested
• ‣Legal obligation: to comply with FCA, AML and other regulatory requirements
• ‣Legitimate interests: fraud prevention, network security, improving our services
• ‣Consent: for optional marketing communications (you can withdraw at any time)

We share your data only where necessary, with:

• ‣Credit reference agencies (Experian, Equifax, TransUnion)
• ‣Fraud prevention agencies and CIFAS
• ‣Payment processors and card network operators (Visa)
• ‣Regulatory authorities (FCA, PRA, HMRC, NCA) when legally required
• ‣Our regulated technology and cloud service providers

We never sell your personal data to third parties.

Under UK GDPR you have the right to:

• ‣Access: request a copy of the personal data we hold about you
• ‣Rectification: ask us to correct inaccurate or incomplete data
• ‣Erasure: ask us to delete your data (subject to legal retention obligations)
• ‣Restriction: ask us to limit how we use your data in certain circumstances
• ‣Portability: receive your data in a structured, machine-readable format
• ‣Object: object to processing based on legitimate interests
• ‣Withdraw consent: for any processing based on consent, at any time

To exercise your rights, email privacy@luminabank.online. We will respond within 30 days.

We retain account and transaction data for 7 years after account closure, as required by UK financial regulations and HMRC guidelines. Identity verification documents are retained for 5 years after the end of our business relationship, in line with the Money Laundering Regulations 2017.

We use cookies and similar technologies to operate our website and app. These include:

• ‣Essential cookies: required for login, security, and core functionality
• ‣Functional cookies: remember your preferences and settings
• ‣Analytics cookies: help us understand how customers use our services (anonymised)

You can manage cookie preferences in your browser settings. Blocking essential cookies may affect how the app functions.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email at least 14 days before the changes take effect. Continued use of our services after the effective date constitutes acceptance of the revised policy.

For privacy-related queries or to exercise your rights:

• ‣Email: privacy@luminabank.online
• ‣Phone: +44 800 123 4567
• ‣Post: Data Protection Officer, Lumina Bank plc, 1 Lumina Square, London, EC2V 8RF

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.