Privacy Policy

Who We Are

Luminas Business Solutions ("LBS", "we", "our", "us") is a business services firm registered and operating in the Republic of Maldives. We provide corporate registration, SME loan application assistance, bookkeeping, and related advisory services to individuals and businesses.

This Privacy Policy explains how we collect, use, store, and protect personal information when you interact with us — including through our website, WhatsApp channel, and AI-powered assistant (Lumi).

Information We Collect

We collect information you provide directly to us, including:

• Identity information: your full name, national ID number (where required for service delivery), and date of birth
• Contact information: phone number, email address, and WhatsApp number
• Business information: company name, trade name, business type, industry, and registration details
• Financial information: information required for loan application preparation or bookkeeping engagements (provided by you or authorised third parties)
• Conversation data: messages sent to us via WhatsApp, our website chat, or email
• Inquiry data: the nature of your inquiry, the services you are interested in, and follow-up preferences

We do not collect payment card details, passwords, or biometric data.

How We Use Your Information

We use your personal information to:

• Respond to your inquiries and provide the services you request
• Prepare and submit documents on your behalf (with your explicit authorisation)
• Schedule consultations and follow-up communications
• Maintain our client records and internal CRM system
• Comply with legal and regulatory obligations under Maldivian law
• Improve the quality of our services and communications

We do not use your information for unsolicited marketing. We will only contact you about services you have expressed interest in.

WhatsApp & Lumi AI Assistant

When you interact with Lumi via WhatsApp:

• Your WhatsApp display name and phone number are recorded
• The content of your messages is processed to understand your inquiry and provide an appropriate response
• A summary of your inquiry and contact details are logged in our secure CRM (Notion) for follow-up by our team
• Lumi does not have access to your existing client records, financial data, or previous case files
• Lumi will never confirm or deny whether you are an existing LBS client
• Complex inquiries are escalated to a human team member — you will be informed when this happens

Message content processed by Lumi is handled via Anthropic's Claude API. Anthropic's data processing terms apply to AI inference. We do not permit your data to be used for AI model training by any third party.

Sharing Your Information

We do not sell, rent, or trade your personal information. We may share your information with:

• Government bodies and regulators: where required by Maldivian law (e.g., MIRA, BML, the Maldives Registrar of Companies) strictly for service delivery on your behalf and with your consent
• Service providers: technology platforms used to operate our services (including Notion for CRM, Anthropic for AI processing, and Meta/WhatsApp for messaging), bound by data processing agreements
• Professional advisers: legal or audit professionals where necessary for service delivery, under confidentiality obligations

All third-party service providers are required to handle your data securely and only for the purposes we specify.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law.

• Inquiry and lead data: 24 months from last contact, unless an engagement begins
• Active client records: for the duration of the engagement plus 7 years (in line with standard accounting and legal obligations in the Maldives)
• WhatsApp conversation logs: 12 months from the date of the conversation

You may request deletion of your data at any time — see Section 7 and Section 10 below.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal data (subject to legal retention obligations)
• Withdraw consent to processing where consent is the legal basis
• Object to the processing of your data for certain purposes

To exercise any of these rights, please contact us using the details in Section 10. We will respond within 14 business days.

Security

We take the security of your personal information seriously. Our technical and organisational measures include:

• Encrypted data transmission (HTTPS/TLS) for all web and API communications
• Access controls limiting staff access to client data on a need-to-know basis
• Secure, access-controlled CRM with audit logging
• Regular security reviews of our technology infrastructure

No system is completely secure. In the unlikely event of a data breach affecting your personal information, we will notify you promptly and take immediate remedial action.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active clients directly.

Your continued use of our services after the effective date of a revised policy constitutes your acceptance of the updated terms.

Contact Us

For any privacy-related inquiries, data requests, or concerns, please contact us: