General Privacy Information

Definitions

This section defines the principal terms used throughout the policy to provide clarity on roles and concepts related to personal data and processing activities conducted by Lumvora.

Personal data means any information relating to an identified or identifiable natural person. For Lumvora this includes contact details, identification numbers, professional details and any information provided in the context of legal engagement.

Processing refers to any operation performed on personal data such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, erasure or destruction.

User refers to any individual who interacts with Lumvora or the sexora.pro website, including potential clients, existing clients, suppliers, partners and visitors who provide personal data or whose data is processed by Lumvora.

Service refers to the enterprise legal consulting services offered by Lumvora, including advisory, compliance reviews, contract drafting, dispute management support and related professional services.

Cookies are small text files stored on device browsers that enable website functionality, analytics and user preference storage. Lumvora uses cookies to operate the site and to gather non-identifying usage information.

Purposes of Processing

Lumvora processes personal data for defined purposes necessary to provide legal services, manage client relationships, comply with legal obligations, improve services and maintain secure operations.

• To provide legal consulting services including advice, documentation, contract drafting and dispute support requested by clients.
• To manage client relationships and communications, schedule meetings and maintain records of engagements and deliverables.
• To perform identity verification, conflict checks and compliance checks required by professional and regulatory obligations.
• To process invoicing, payments and business reconciliation associated with services rendered by Lumvora.
• To operate and improve sexora.pro, analyze site usage and enhance user experience through analytics and feedback.
• To protect Lumvora and its clients by maintaining security systems, detecting and responding to incidents, and conducting risk assessments.
• To comply with legal obligations, respond to lawful requests from authorities and to enforce our legal rights where necessary.
• To conduct internal record-keeping, reporting and professional oversight activities required by regulatory bodies and quality management.

Legal Basis for Processing

Where applicable, Lumvora processes personal data under one or more lawful bases, including necessity for contractual performance, compliance with legal obligations, legitimate interests and, where required, consent.

• Performance of a contract: processing necessary to provide legal services and fulfill obligations under client agreements.
• Legal compliance: processing required to comply with Malaysian law, regulatory duties and professional rules applicable to legal practice.
• Legitimate interests: processing for operational reasons such as security, fraud prevention, quality assurance and service improvement, balanced against individuals' rights.
• Consent: where specific processing activities require consent under applicable law, Lumvora will seek and record valid consent prior to processing.

Application of GDPR Principles

Although Lumvora is based in Malaysia, certain matters may involve cross-border processing or EU data subjects. In such cases Lumvora considers relevant GDPR principles to ensure lawful and transparent processing where applicable.

• Transparency: providing clear information about processing activities to individuals whose data is processed in connection with cross-border matters.
• Purpose limitation: processing personal data only for specified, explicit and legitimate purposes consistent with the purposes described in this policy.
• Data minimization: collecting only the minimum personal data necessary to achieve the stated purposes of processing.
• Accuracy: taking reasonable steps to ensure that personal data is accurate, complete and up to date for its intended use.
• Security: implementing technical and organizational measures to protect personal data against unauthorized access, alteration and disclosure.
• Accountability: maintaining records of processing activities and documentation to demonstrate compliance with applicable data protection obligations when relevant.

Cookies and Similar Technologies

Lumvora uses cookies and related technologies on sexora.pro to enable site functionality, remember preferences and collect analytics data. Users can manage cookie preferences through their browser or via site controls.

The site uses session cookies for essential functions, persistent cookies for preferences, and analytics cookies to understand site usage. Third-party cookies may be used for analytics and embedded content where disclosed.

Categories include strictly necessary cookies for site operation, preference cookies to store user settings, analytics cookies for performance monitoring and optional marketing cookies if enabled by the user.

Users can manage cookie settings in their browser, clear stored cookies, or use available site controls to opt out of non-essential cookies. Disabling cookies may affect certain site features and functionality.

Full cookie policy and controls are available at sexora.pro/cookie-policy.

Data Sharing

Lumvora shares personal data only as necessary to deliver services, to comply with legal obligations, and with trusted third-party providers under appropriate confidentiality and security measures.

• Service providers: professional IT, hosting, payment, document management and analytics vendors engaged under data processing agreements to support Lumvora operations.
• Professional advisors: external auditors, consultants or legal advisors where sharing is necessary for case management or compliance reviews.
• Regulators and law enforcement: disclosures required by law, court orders or to respond to lawful requests from authorities.
• Clients and counterparties: information may be shared with opposing counsel, counterparties or other parties in the context of legal matters where disclosure is necessary and lawful.
• Business transfers: in the event of a merger, acquisition or sale of assets, personal data may be transferred as part of the transaction subject to confidentiality safeguards.
• Aggregated or anonymized data: non-identifiable data may be shared for research, benchmarking or reporting purposes without revealing individual identities.

International Transfers

Where data is transferred across borders for hosting, professional support or legal matters, Lumvora implements appropriate safeguards consistent with applicable laws. Transfers are limited to jurisdictions that provide adequate protections or where contractual safeguards are in place.

Safeguards may include data transfer agreements, standard contractual clauses, binding corporate rules or reliance on local legal bases for transfer. Lumvora assesses transfer risks and documents the measures employed to protect data.

Data Retention

Lumvora retains personal data only for the period necessary to fulfill the purposes described in this policy, to meet legal or regulatory obligations, to resolve disputes and to support legitimate record-keeping requirements.

Client account records, engagement letters and matters-related documentation are retained for a period consistent with professional and regulatory retention obligations, typically several years following the end of an engagement.

Communications and correspondence may be retained as part of client records for the duration of an engagement and for a subsequent period required by applicable law or for legitimate business reasons.

System logs, access records and security-related logs are retained for monitoring and incident response purposes, generally for a defined period aligned with operational and legal needs.

Upon expiry of retention periods, Lumvora will securely delete, anonymize or archive personal data in accordance with internal policies and applicable legal requirements, unless continued retention is justified by law.

Security Measures

Lumvora maintains administrative, technical and physical safeguards to protect personal data against unauthorized access, disclosure, alteration and destruction. Measures are regularly reviewed and updated in line with risk assessments.

• Access controls and authentication mechanisms to limit access to personal data to authorized personnel on a need-to-know basis.
• Encryption of sensitive data in transit and where applicable at rest, and secure configuration of servers and network components.
• Regular backups, patch management, vulnerability scanning and incident response procedures to detect and address security events promptly.

Your Rights

Depending on applicable law and the nature of the relationship, individuals may have rights concerning their personal data. Lumvora enables individuals to exercise available rights and provides contact details to submit requests.

• Right of access: obtain confirmation of whether Lumvora processes personal data and request a copy of such data when applicable.
• Right to rectification: request correction of inaccurate or incomplete personal data held by Lumvora.
• Right to erasure or restriction: under certain circumstances, request deletion or restriction of processing of personal data in line with legal provisions.
• Right to object: object to processing based on legitimate interests or direct marketing where applicable and permitted by law.
• Right to data portability: where applicable, request a portable copy of personal data provided to Lumvora in a structured, commonly used and machine-readable format.
• Right to data portability: request a copy of personal data in a commonly used, machine-readable format where technically feasible.
• Right to restriction of processing: request temporary limits on how we process certain categories of personal data while a dispute is being resolved.
• Right to lodge a complaint with a supervisory authority in Malaysia if you believe our handling of personal data does not comply with applicable data protection laws.

How to exercise your privacy rights

To exercise any of the rights described, contact Lumvora using the contact details below or via the privacy request form on the website. Please include sufficient information to identify yourself and to describe the request. We will verify your identity before processing requests that involve access to or changes in personal data.

[email protected]

We aim to respond to verifiable privacy requests within 30 days. In complex cases or where additional verification is needed, response time may be extended and Lumvora will inform you of any delay and expected timeframe.