01Who we are
LUDEXA GROUP LIMITED (“Ludexa”, “we”, “us”) is the controller of the personal information described in this notice. We are a private company limited by shares registered in England and Wales under company number 17335104.
- Registered office
- 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
- Privacy contact
- info@ludexagroup.com
02Scope
This notice applies when you visit ludexagroup.com, submit an enquiry or correspond with us. It does not cover third-party websites linked from this site.
03Information we collect
- Identity and contact data: name, email address, company and role.
- Enquiry data: selected topic, message and correspondence.
- Technical and security data: IP address, browser or device information, timestamps, request identifiers and anti-abuse events.
- Preference data: language and privacy choices where these are saved.
04How and why we use it
| Purpose | UK GDPR lawful basis |
|---|---|
| Secure and deliver the site, and prevent abuse | Article 6(1)(f): our legitimate interest in providing a reliable and secure service |
| Receive, triage and respond to a general enquiry | Article 6(1)(f): our legitimate interest in managing genuine business communications |
| Take steps towards a contract at an individual’s request | Article 6(1)(b): steps before entering into a contract |
| Maintain records required by law or regulation | Article 6(1)(c): legal obligation |
| Establish, exercise or defend legal claims and maintain an audit trail | Article 6(1)(f): our legitimate interests in protecting the company and its rights |
We do not make solely automated decisions that produce legal or similarly significant effects. We do not add contact-form users to marketing lists; any future marketing choice will be separate and optional.
05Required information
Name, email, enquiry type and message are required so that we can understand and answer your request. If you do not provide them, we may be unable to respond. Company or organisation information is optional.
06Who receives information
We disclose information only where necessary to a limited number of authorised company representatives; providers supporting website hosting, content delivery, security, form delivery and email; professional advisers; and courts, regulators or authorities where lawfully required.
To reduce the risk of an enquiry being missed, a limited authorised company representative may access submissions through a separately secured secondary mailbox. The secondary address is not public. We do not sell personal information.
07International processing
We are based in the United Kingdom. Some providers may process information in other countries. Where UK law treats a transfer as restricted, it must be covered by an applicable adequacy regulation or appropriate safeguards, such as the UK International Data Transfer Agreement or UK Addendum, as relevant. You may contact us for information about the mechanism applicable to a particular transfer.
08How long we keep information
| Record | Usual period |
|---|---|
| Ordinary enquiry | 12 months after the last meaningful contact |
| Active business opportunity | 24 months after the last meaningful contact |
| Customer and contract records where an agreement is formed | 6 years after the relationship ends |
| Security and form-abuse logs | 30 days; up to 12 months for an investigated incident |
| Privacy-rights and complaint records | 6 years after closure |
| Rejected spam | Deleted as soon as reasonably possible |
At the end of the period, we delete or anonymise the information unless a legal obligation or active dispute requires longer retention.
09Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to our use of your information, and to receive portable data. Where processing is based on consent, you may withdraw it without affecting earlier processing.
To exercise a right, email info@ludexagroup.com. We may request proportionate information to verify your identity.
10Complaints
You may raise a data protection complaint by emailing info@ludexagroup.com with “Data protection complaint” in the subject line or by selecting that option in our contact form. We will acknowledge it within 30 days, investigate it appropriately, keep you informed where necessary and communicate the outcome without undue delay.
You may also complain to the Information Commissioner’s Office.
11Security, children and changes
We use proportionate technical and organisational measures, including encrypted transport, access controls, secrets management, anti-abuse controls and restricted mailbox access. No internet transmission is completely risk-free.
This business-to-business website is not directed to children and we do not knowingly seek information from anyone under 18.
We may update this notice and will publish the revised date here. Contact us at info@ludexagroup.com or write to the registered office.