Privacy Policy

Last updated: 15 September 2026

1. Who we are

This website, luarit.com, is operated by Luar Cybersecurity & Information Technologies Ltd, trading as Luar IT ("Luar IT", "we", "us"), a company established in Ireland. For the purposes of the EU General Data Protection Regulation (GDPR), Luar IT is the data controller for the personal data described in this policy.

You can reach us at [email protected] for any privacy-related query, including the requests listed in section 5.

2. What this website does — and does not — collect

This site is intentionally minimal from a data-collection standpoint:

There is no contact form. Getting in touch means sending an email, so no form data is submitted to or stored by this website.
We do not run analytics, advertising or third-party tracking scripts on this site.
The only browser storage used is a single local preference — your chosen light or dark theme — saved in your browser's local storage. It never leaves your device and is not accessible to us. See our cookie policy for detail.
Our hosting infrastructure may record standard technical web server logs (such as IP address, requested page and timestamp) for security and reliability purposes, in line with the legitimate interest described below. These logs are not used for profiling or marketing.

3. Data you send us directly

When you email any @luarit.com address, we process the content of that email and your email address in order to respond to you, evaluate a potential engagement, or deliver a service you've asked for. If that correspondence leads to a contract, we retain related records for as long as necessary to perform the contract and meet our legal and accounting obligations.

We recommend encrypting any sensitive technical information (credentials, vulnerability details, network diagrams, incident data) using the PGP key published on our contact page before sending it.

4. Legal basis for processing

We process personal data on the following legal bases under the GDPR: performance of a contract or steps taken at your request prior to entering one (Art. 6(1)(b)); our legitimate interest in operating a secure website and responding to enquiries (Art. 6(1)(f)); and compliance with legal obligations such as tax and accounting rules (Art. 6(1)(c)).

5. Your rights

Under the GDPR you have the right to request access to, correction of, or erasure of your personal data; to restrict or object to certain processing; and to receive your data in a portable format. To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at dataprotection.ie, or with your local supervisory authority if you are based elsewhere in the EU.

6. Data retention

We keep correspondence and contract-related records only for as long as needed to provide the relevant service, satisfy legal or accounting requirements, or resolve disputes, after which it is deleted or anonymised.

7. International transfers

Our infrastructure and correspondence are handled within the European Union / European Economic Area. If a future service ever requires a transfer outside the EEA, we will only do so under a GDPR-recognised safeguard (such as Standard Contractual Clauses) and will update this policy accordingly.

8. Security

As a security company, we apply the same principles to our own systems that we recommend to clients: encryption in transit, access control, and regular review. No system is completely risk-free, and we treat any suspected data incident affecting this website as seriously as we would for a client.

9. Changes to this policy

We may update this policy as our services or applicable law evolve. The "last updated" date at the top reflects the most recent revision.

10. Contact

Questions about this policy: [email protected]. Sensitive matters can be encrypted with our PGP key.