Privacy Policy

01Who we are

LumiJoint is a pre-validation medtech team based in Athens, Greece. Registered entity: [fill in legal entity name, registration number, registered address].

For any privacy-related question, contact us at lumijoint@gmail.com.

02What we collect

• Your email address, when you submit the signup form to receive LumiJoint updates.
• Your name, only if you choose to provide it (the name field is optional).
• Your consent record — a timestamp marking when you agreed to receive updates.
• Technical submission metadata — IP address, browser, and timestamp — collected by our form processor for security and abuse prevention.

We do not collect health, biometric, or patient data on this website.

03Why we collect it

• Your email + your consent → to send LumiJoint progress updates. Legal basis: Art. 6(1)(a) GDPR (consent).
• Server logs → to keep the site secure and functioning. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

04Who processes your data

We use the following third-party services as data processors:

• Form submissions: Formspree, Inc. (United States) — receives and stores your signup form submission on our behalf, including email, optional name, consent timestamp, and standard request metadata. Data is transferred to the United States; this transfer is covered by Standard Contractual Clauses under Art. 46 GDPR. See Formspree's privacy policy.
• Website hosting: [fill in hosting provider, region].

We do not currently use a newsletter-sending tool — updates have not yet been sent. When we add one (e.g. Buttondown, MailerLite), this policy will be updated to disclose it and subscribers will be notified before any email is sent.

We do not sell your data. We do not share it with advertisers or analytics companies.

05How long we keep it

We keep your email address until you ask us to remove it. You can request removal at any time by emailing lumijoint@gmail.com. Once we begin sending email updates, every email will also include a one-click unsubscribe link. Submission metadata held by our form processor is retained according to its own retention schedule.

06Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to our processing.
• Receive your data in a portable, machine-readable format.
• Withdraw your consent at any time by emailing us; once email updates begin, every email will also include a one-click unsubscribe link.
• Lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

To exercise any of these rights, email lumijoint@gmail.com. We will respond within 30 days.

07Cookies and tracking

This website does not use cookies, analytics scripts, or third-party trackers. If that changes, we will update this policy and notify subscribers.

08Children

This site and its mailing list are not directed at children under 16. We do not knowingly collect data from anyone under that age.

09Medical disclaimer

LumiJoint is in pre-clinical-validation development. Nothing on this site constitutes medical advice, a diagnosis, or a regulatory claim of clinical efficacy. The device is not approved by any regulatory authority and is not for sale.

10Changes to this policy

We may update this policy as the project evolves. Material changes will be communicated by email to subscribers and noted at the top of this page.