Privacy Policy

This Privacy Policy explains how Lona ("we", "us", "our") collects, uses, shares, and protects your personal data when you use our website and services. We are committed to protecting your privacy and complying with data protection laws, including the General Data Protection Regulation (GDPR).

Lona, operated by MINDSIGHT VENTURES SL (VAT: B19730910), with legal office at Carrer Freixa, 6, 08021 Barcelona, Spain, is the data controller responsible for your personal data. Contact details: admin@lona.agency.

We collect data you provide directly (e.g., via Clerk authentication: name, email; via contact form: name, email, message), data collected automatically (e.g., usage data, IP address, browser type, cookies - see our Cookie Policy), and potentially data from third parties (e.g., payment processors like Stripe).

We use your data to: provide and improve our services, process payments (via Stripe), communicate with you (e.g., respond to contact forms via Resend), authenticate users (via Clerk), ensure security, comply with legal obligations, and analyze usage (with consent where required). The legal basis for processing includes contract necessity, consent (e.g., for non-essential cookies), legitimate interests, and legal obligations.

We may share data with: service providers (Clerk for auth, Stripe for payments, Resend for email, Vercel for hosting), legal authorities if required. We ensure third parties respect data protection laws. Data may be transferred outside the EEA under appropriate safeguards (e.g., Standard Contractual Clauses).

We implement technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction.

We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law.

You have the right to: access, rectify, erase, restrict processing, object to processing, data portability, and withdraw consent. You can exercise these rights by contacting us. You also have the right to lodge a complaint with a supervisory authority.

We may update this policy from time to time. We will notify you of significant changes. The "Last Updated" date indicates the latest revision.