Privacy Policy

Lumithos is a values-first brand strategy consultancy based in Lagos, Nigeria, serving clients internationally. For any privacy question, write to [email protected].

• Information you give us through our project intake, quote request, website request, consultation booking, and investor access forms: your name, email, company or fund, budget range, timeline, project details, preferred contact method, and anything you write in a message field.
• Client portal information: the account email you sign in with, plus the proposals, scopes of work, and invoices we prepare for you.
• Basic technical data created automatically when you browse, such as pages viewed and general device or browser information.

We do not ask for, and ask you not to send, sensitive personal information (health, biometric, or government identity data) or card details through our forms.

• To reply to your enquiry and run a fit-check.
• To prepare and deliver proposals, scopes of work, invoices, and the work itself.
• To schedule and hold consultations, including through Google Calendar where you choose to book that way.
• To review requests to join our invite-only investor network and, where relevant, to make introductions only with the consent of both sides.
• To operate, secure, and improve this website. We contact you with updates only where you asked for them or where they relate to work in progress.

Your information is visible to the Lumithos team members working on your engagement, and to the service providers that run our infrastructure on our behalf, including our hosting and database provider, our email provider, and Google Calendar for bookings. These providers process data only to deliver their service to us.

We do not sell or rent your information, and we do not share founder or company details with investors (or investor details with founders) unless you explicitly ask us to make that introduction. We may disclose information where the law requires it.

Enquiries that do not become projects are kept for up to 24 months so we can pick up the conversation where it stopped. Records tied to paid engagements — contracts, scopes of work, and invoices — are kept for as long as tax and accounting rules require. You can ask us to delete your information earlier at any time.

Data is stored on managed, access-controlled infrastructure, encrypted in transit, and reachable only by authenticated accounts with the permissions they need. No system is perfectly secure, so we also keep the amount of information we collect deliberately small.

You can ask us to access, correct, export, or delete the information we hold about you, or to stop contacting you. Email [email protected] and we will respond within 30 days. If you are in a region with data protection rights such as the NDPA, GDPR, or UK GDPR, those rights apply to you and you may complain to your local regulator.

We use only the cookies and local storage needed to keep the site working and to keep you signed in to the client portal. Because our providers operate globally, your information may be processed outside your country under appropriate safeguards.

This site is intended for business use and is not directed at children under 16. If we update this policy, we will change the date at the top; material changes will be communicated to active clients directly.