Compliance
Compliance at LumaKol
What LumaKol does to help your business meet data protection and calling rules, what it does not do, and the documents that set out our commitments.
Who is responsible for what
Your business decides whom it calls and why, so it is the controller of its leads’ data and responsible for following the calling rules where it operates. LumaKol processes that data for you, and gives you controls in the product: calling hours checked before the dial, a block on leads who asked not to be contacted, attempt limits, exports and deletion.
The pages below explain those controls and our commitments in plain English. We do not claim certifications we do not hold.
Compliance documents
- GDPRController and processor roles, handling rights requests in the product, breach notice, hosting and international transfers.Read
- Data Processing AddendumThe processing terms that form part of the Terms for EU and UK personal data, with the full sub-processor list.Read
- US calling rulesThe TCPA, the National Do Not Call Registry and state rules: how calls are placed in LumaKol and what it does not check.Read
- UK calling rulesTPS, CTPS and PECR: the controls LumaKol gives UK calling teams, and why you still need to screen your lists.Read
Security and legal
Questions about data protection?
Write to us for rights requests, a countersigned copy of the DPA, or anything on these pages.