Privacy Policy

Last updated: 3 Sep 2026

The General Data Protection Regulation (GDPR) is a new legal framework set up by the European Union in April 2016 to build upon existing data protection legislation. GDPR came into effect on 25th May 2018, and has introduced a range of fresh guidelines spelling out the rights of consumers and dictating how companies can store and share information. 

As a hugely significant change to the global business landscape, it is critical that ilumis embraces all aspects of GDPR to maintain full compliance. 

Here at ilumis, we fully appreciate and support the European Union’s focus on expanding upon digital rights. As a company, we strongly believe in the need for greater business transparency and accountability concerning the collection and handling of personal data.  

That is why Ilumis is a firm advocate of GDPR and its many implications.  These include among many other aspects:  

• The Right to Object to Processing  
• The Right to Be Forgotten 
• The Right to Data Portability  
• The Right to Withdraw Consent 

As part of our commitment to GDPR and the rights of our customers and clients, ilumis vows to ensure our organisation considers and actions all necessary changes surrounding data processing, data storage and the disposal of personal data.  

This includes a commitment to fully fulfil Breach Disclosure Requirements by notifying authorities and concerned individuals of any compromise within 72 hours.  

Moreover, as part of our GDPR strategy, ilumis will complete impact assessments wherever possible, to identify and deliver the best service possible, as well as to extend our customers a guarantee that data is being kept secure. 

Furthermore, we pledge to uphold the following key values and responsibilities: 

• We vow to demonstrate full responsibility and dutiful respect as a keeper of customer, client and employee data. 
• We totally support GDPR and its requirements and will do everything within our power to appropriately resource and fund any changes we must enforce to ensure Ilumis can meet its obligations. 
• We promise to maintain ownership and transparency concerning data protection and privacy across all elements of our company. 
• We pledge to create and maintain a purposeful data processing inventory documenting all data operations, including collection, processing and storage. 
• We guarantee to extend every possible show of support to individuals intent on exercising their rights as outlined under GDPR legislation. 
• We will conduct a regular review to assess the legality and purpose for the collection, processing and storage of personal data. 
• We vow to act upon identified gaps and develop robust processes to maintain full GDPR compliance. 
• We promise to clearly communicate the business purpose and legal grounds for any transfer of data – including transfer outside of the European Union.  
• We will contact all partner organisations, contractors or other third parties to identify their own GDPR commitments, establish relevant contract terms and solidify GDPR compliance controls. 

LinkedIn Insight Tag, Cookies and Conversion Tracking

We use the LinkedIn Insight Tag and related LinkedIn advertising and conversion-tracking technologies, provided by LinkedIn Corporation and its affiliates (“LinkedIn”), on our website. We use these technologies to understand how visitors interact with our website, measure the effectiveness of our LinkedIn advertising, attribute conversions to our campaigns and improve our marketing activities.

What the LinkedIn Insight Tag does

The LinkedIn Insight Tag is a small piece of code placed on our website. When enabled, it allows LinkedIn to recognise visits to our website and collect information about interactions with our website and our LinkedIn advertising.

The information that may be collected or generated through the Insight Tag and related technologies includes:

• your IP address and approximate location derived from it;
• information about your browser, device and operating system;
• the web pages you visit and actions you take on our website;
• the date and time of your visit and other information about your interaction with our website;
• the website or advertising source from which you arrived at our website;
• information about interactions with our LinkedIn advertisements; and
• information about whether you have completed a particular conversion or other action that we have configured LinkedIn to measure.

LinkedIn may combine information collected through the Insight Tag with other information it holds about you, including information associated with your LinkedIn account, where permitted by applicable law.

We do not use the Insight Tag to intentionally collect special category data or the contents of communications submitted to us. We ask that you do not provide sensitive personal information through advertising forms or other tracking mechanisms unless specifically requested and appropriate.

Cookies and similar technologies

The LinkedIn Insight Tag may use cookies and similar technologies, including technologies that store or access information on your device, to recognise browsers, measure website activity and attribute conversions.

These technologies may be used to:

• remember or recognise a browser for measurement purposes;
• determine whether a visitor has previously interacted with our website or LinkedIn advertising;
• measure visits and actions on our website;
• attribute website activity or conversions to LinkedIn advertising campaigns;
• produce aggregated advertising and campaign-performance information; and
• help LinkedIn provide and measure its advertising services.

The exact cookies or similar technologies used may depend on LinkedIn’s services and our advertising configuration. They may include first-party or third-party cookies and other tracking technologies.

Consent

Because LinkedIn’s Insight Tag and related advertising technologies are used for non-essential advertising and measurement purposes, we will not place or access such cookies, or activate the relevant tracking technologies, on your device unless we have a lawful basis to do so and, where required by the Privacy and Electronic Communications Regulations 2003 (“PECR”), you have given your consent.

When you first visit our website, our cookie consent mechanism will provide you with the option to accept or refuse these technologies. You can change or withdraw your consent at any time using our cookie settings.

If you refuse or withdraw consent, the LinkedIn Insight Tag and associated non-essential tracking technologies will not be activated for you, except where a particular technology can lawfully be used without consent. Withdrawing consent does not affect the lawfulness of any processing that took place before your withdrawal.

Our website will continue to function if you refuse these technologies, although we may be unable to measure your interactions with our LinkedIn advertising or accurately attribute conversions to our campaigns.

LinkedIn conversion tracking

We use LinkedIn conversion tracking to understand what happens after someone interacts with, or is exposed to, one of our LinkedIn advertisements.

For example, we may configure LinkedIn to record when a visitor:

• submits a contact or enquiry form;
• requests further information;
• registers for an event;
• signs up for a service;
• downloads specified material; or
• completes another action that we have designated as a conversion.

Conversion tracking allows us to assess the performance of our LinkedIn advertising campaigns, understand which campaigns or advertisements generate relevant activity and improve how we allocate our advertising budget.

The conversion information is generally used for measurement and reporting rather than to identify you directly to us. However, the information may constitute personal data where it can be associated with an identifiable individual, directly or indirectly.

LinkedIn Lead Gen Forms

We may also use LinkedIn Lead Gen Forms. These are forms displayed on LinkedIn that allow LinkedIn members to provide information to us directly without necessarily visiting our website.

If you submit a Lead Gen Form, LinkedIn will provide us with the personal information that you choose to submit, such as your name, contact details, job title, company or other information requested in the form. The specific information collected will be shown to you when you complete the form.

We use this information for the purposes stated in the Lead Gen Form, which may include responding to your enquiry, providing information you have requested, contacting you about our products or services, or following up on an event or other activity.

Where we receive your personal data through a LinkedIn Lead Gen Form, we become responsible for processing that information in accordance with applicable UK data protection law. LinkedIn may separately process your information in accordance with its own privacy policy and terms.

Our legal bases

Where PECR requires consent to place or access cookies or use similar tracking technologies, we rely on your consent.

For the subsequent processing of personal data collected through these technologies, our lawful basis under the UK GDPR will depend on the circumstances and purpose of the processing. This may include:

• Consent (Article 6(1)(a) UK GDPR): where we have asked for and obtained your consent for the relevant processing;
• Legitimate interests (Article 6(1)(f) UK GDPR): where appropriate, for activities such as analysing the effectiveness of our marketing and advertising, provided that our interests are not overridden by your rights and freedoms; or
• Contract or steps prior to entering into a contract (Article 6(1)(b) UK GDPR): where processing information submitted through a Lead Gen Form is necessary to respond to a request or take steps at your request before entering into a contract.

Where we rely on consent, you can withdraw your consent at any time.

Who receives the information

Information collected through the LinkedIn Insight Tag and related technologies is transmitted to LinkedIn.

LinkedIn may process this information for purposes including advertising, conversion measurement, analytics, reporting, security and the operation and improvement of its services. LinkedIn may also use information collected through its services for its own purposes, subject to applicable law and its privacy terms.

We do not sell the personal information collected through the LinkedIn Insight Tag to LinkedIn or otherwise sell it to third parties.

International transfers

LinkedIn operates internationally, and information collected through its services may be processed in countries outside the United Kingdom.

Where we are responsible for transferring personal data outside the UK, we will ensure that the transfer is carried out in accordance with applicable UK data protection law and that an appropriate transfer mechanism and safeguards are in place where required.

LinkedIn may have its own international data-transfer arrangements for information that it processes as an independent controller. Further information about LinkedIn’s international data processing and safeguards is available in its privacy information.

How long information is retained

The retention period for information collected through LinkedIn technologies depends on the particular cookie, tracking technology and processing purpose.

We retain personal data that we receive directly, including information submitted through LinkedIn Lead Gen Forms, only for as long as necessary for the purpose for which it was collected and in accordance with our general data-retention practices and applicable legal obligations.

LinkedIn may retain information collected through the Insight Tag, cookies and its advertising services in accordance with its own retention policies. As these retention periods may change and may differ depending on the technology and type of information involved, we do not specify a single retention period for LinkedIn’s processing.

Managing your choices

You can refuse or withdraw consent to LinkedIn advertising and conversion-tracking cookies and similar technologies through our website’s cookie settings.

You can also control certain cookies through your browser settings. Please note that browser controls may not provide the same level of choice as our consent mechanism, and disabling cookies may affect other website functionality.

If you use LinkedIn, you can also manage certain advertising and privacy preferences through your LinkedIn account and LinkedIn’s privacy settings.

LinkedIn’s privacy information

LinkedIn acts as an independent controller for some of the processing it carries out using information collected through its services. Its processing is therefore also governed by LinkedIn’s own privacy policy and terms.

For more information about LinkedIn’s processing of personal data, cookies, advertising technologies, international transfers and your privacy choices, please consult LinkedIn’s current privacy information and advertising settings.

Your data protection rights

Subject to the conditions and exemptions set out in UK data protection law, you may have rights including the right to:

• request access to personal data we hold about you;
• request correction of inaccurate or incomplete personal data;
• request erasure of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request portability of certain personal data; and
• withdraw consent where processing is based on consent.

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), if you believe that your personal data has been processed unlawfully or that your data protection rights have not been respected.

For further information about exercising your rights, please see the general “Your Rights” section of this Privacy Policy or contact us using the details provided in the “Contact Us” section.

Changes to this information

We may update this section from time to time to reflect changes to our use of LinkedIn’s services, applicable law, or our website and advertising practices. The latest version will be published on this page.