top of page
Louma_light_horizontal_transparente.png
fondo louma.jpg

Privacy Policy

Privacy Policy
Louma Agency Last updated: 13/07/26

1. Who We Are
Louma Agency ("we", "us", "our") is the trading name of Maria del Pilar Sanchez Barrera, a sole trader based in the UK, providing digital marketing services. This Privacy Policy explains how we collect, use, and protect personal data when you visit [www.loumaagency.com] (the "Site") or engage us for our services.

We are registered with the UK Information Commissioner's Office (ICO), registration number  ZC160130. We are the "data controller" for the personal data described in this policy, unless stated otherwise.

Contact details:

 
2. What Personal Data We Collect

We may collect the following types of personal data:
Data you give us directly:

  • Name, email address, phone number, and business name (e.g. via our contact form, enquiry form, or email)

  • Details you provide about your business or project when requesting a proposal or consultation

  • Communications you send us (emails, messages, call notes)
     

Data collected automatically:

  • IP address, browser type, device information, and pages visited, via cookies and analytics tools (see Section 5)

  • Approximate location (derived from IP address)
     

3. How We Use Your Data
We use personal data for the following purposes:

Responding to enquiries and providing quotes/proposals
Delivering our Services under a signed SOW
Sending invoices and managing payments
Marketing communications (e.g. newsletters, case studies) 
Improving the Site (analytics)
Complying with legal and accounting obligations
 
4. Who We Share Data With
We do not sell your personal data. We may share data with:

  • Service providers / processors who help us run our business, such as email and calendar tools, website hosting, invoicing/accounting software, and project management tools. These providers only process data on our instructions and under appropriate data processing terms.

  • Google Analytics (Google Ireland Limited / Google LLC), used to analyse Site traffic and usage, as described in Section 5.

  • Professional advisors (e.g. accountant, insurer, legal advisor) where necessary.

  • Regulators or authorities where required by law.
     

Where any provider is based outside the UK/EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or an adequacy decision).

5. Cookies
Our Site uses cookies and similar technologies to:

  • Enable core site functionality

  • Understand how visitors use the Site (analytics)

  • Support marketing/advertising
     

Google Analytics: We use Google Analytics to understand how visitors use our Site (e.g. pages viewed, time on site, referral source, approximate location). Google Analytics sets cookies that collect information such as your IP address (which we have configured to be anonymised/truncated where possible), device and browser type, and browsing behaviour on our Site. This data is processed by Google, which acts as a data processor on our behalf, and is used to generate aggregated, anonymised reports. Some data may be transferred to and processed by Google in the US; Google is certified under the EU-US and UK-US Data Privacy Framework, which provides an approved safeguard for this transfer. You can find out more in Google's Privacy Policy and opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.

You can control or disable cookies through your browser settings. Disabling some cookies may affect how the Site functions. 


6. Data Retention
We keep personal data only as long as necessary for the purposes described in this policy:

  • Enquiry/contact form data: up to [12 months] if no client relationship follows

  • Client and contract-related data: for the duration of the relationship plus [6 years] to meet UK tax and accounting obligations

  • Marketing consent records: until you unsubscribe or withdraw consent

  • Google Analytics data: retained per our Google Analytics account settings (commonly 14 months by default), after which it is automatically deleted

 
7. Your Rights
Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate data

  • Request deletion of your data ("right to be forgotten"), subject to legal exceptions

  • Object to or restrict certain processing

  • Request data portability

  • Withdraw consent at any time, where processing is based on consent

  • Complain to the ICO (ico.org.uk) if you believe your data has been mishandled
     

To exercise any of these rights, contact us at hello@louma-agency.co.uk. We will respond within one month, as required by law.
 
8. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including secure business banking, access controls on our tools, and cyber insurance cover.

9. Children's Privacy
Our Site and Services are directed at businesses, not children. We do not knowingly collect personal data from anyone under 18.
 
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted here with a revised "Last updated" date.
 
11. Contact Us
Questions about this Privacy Policy or how we handle your data can be sent to:

bottom of page