Cookie Policy

Effective date: 21 April 2026 Last updated: 21 April 2026 

1. About this policy

This Cookie Policy explains how Lumai Limited ("Lumai", "we", "us", "our") uses cookies and similar technologies on lumai.ai (the "Website"). It should be read alongside our Privacy Policy.

This policy is provided in accordance with applicable data protection laws, including in the UK and EU.

2. What cookies are

Cookies are small text files placed on your device when you visit a website. They help websites function properly, improve performance, and provide information to us about how the Website is used.

We also use similar technologies (such as pixels, tags, and local storage). For simplicity, we refer to all of these as "cookies".

Cookies may be:

  • First-party (set by us) or third-party (set by external providers)
  • Session cookies (deleted when you close your browser) or persistent cookies (stored until they expire or are deleted)

3. The cookies we use

We use the following categories of cookies:

(a) Strictly necessary cookies

These cookies are essential for the operation, security, and core functionality of the Website. They cannot be switched off and do not require your consent.

Examples include:

Cookie Provider Type Purpose
cookieyes-consent CookieYes Persistent Used by our consent management tool to remember your cookie consent preferences (accepted, rejected, or category-level choices)

(b) Analytics cookies

These cookies help us understand how visitors use our Website so we can improve it. We rely on your consent to use these cookies.

We use Google Analytics 4 (GA4) to collect information such as:

  • Pages visited
  • Time spent on the Website
  • How users arrive at the Website

We have configured GA4 to use IP anonymisation and we do not use Google Signals or cross-device tracking. Analytics data is retained in GA4 for [2 / 14 – confirm your GA4 setting] months.

We use PostHog to collect information such as:

  • Pages visited
  • Time spent on the Website
  • How users interact with the Website, including session recordings
  • User feedback signals

We have configured PostHog to respect user privacy settings and avoid collecting unnecessary personal data. Analytics data and session recordings are used only to understand and improve the Website experience.

Cookie Provider Type Expiry Purpose
_ga Google Persistent 2 years Distinguishes unique users
_ga_<container-id> Google Persistent 2 years Stores and updates session state for GA4
ph_<project-id> PostHog Persistent 12 months Identifies returning users and stores session data

(c) Marketing cookies

These cookies help us understand how visitors interact with our marketing and measure the effectiveness of our campaigns. We rely on your consent to use these cookies.

We use HubSpot to support our sales and marketing activities. HubSpot cookies allow us to:

  • Recognise returning visitors and associate Website activity with marketing contacts
  • Measure the performance of our email and content marketing
  • Improve the relevance of communications we send to business contacts

The main HubSpot cookies are listed below – and the full list is available in our consent management tool.

Cookie Provider Type Expiry Purpose
__hstc HubSpot Persistent 13 months Tracks visitor identity and session history across visits
hubspotutk HubSpot Persistent 13 months Stores visitor identity token for de-duplication in HubSpot CRM
__hssc HubSpot Persistent 30 minutes Tracks session activity to determine whether to increment session count
__hssrc HubSpot Session Session Determines whether the browser has been restarted between sessions

4. Your choices

When you first visit our Website, you will be asked to choose whether to accept or reject non-essential cookies.

You can:

  • Accept all non-essential cookies
  • Reject all non-essential cookies
  • Choose your preferences by category

We do not set analytics or marketing cookies until you provide your consent. Rejecting non-essential cookies will not affect your ability to use the Website.

You can withdraw or change your consent at any time by clicking the "Cookie settings" link in the Website footer. Withdrawing consent is as easy as giving it.

You can also control cookies through your browser's settings or help documentation. To learn more about cookies generally, visit allaboutcookies.org.

5. Global Privacy Control

We honour the Global Privacy Control (GPC) signal as a request to reject non-essential cookies. If your browser sends this signal, we will treat it as a refusal of analytics and marketing cookies.

‍

We do not respond to "Do Not Track" signals due to the lack of a consistent industry standard.

‍

6. Third-party cookies and international transfers

Some cookies are set by third-party providers, including Google (for analytics), PostHog (for analytics) and HubSpot (for marketing). These providers may process personal data outside the UK, including in the United States.

Where personal data is transferred outside the UK, we rely on appropriate safeguards under UK data protection law, such as:

  • the UK Extension to the EU-US Data Privacy Framework (where the recipient is certified);
  • the UK International Data Transfer Agreement (IDTA); or
  • the UK Addendum to the EU Standard Contractual Clauses.

You can find more information about how these third parties handle your data here:

7. Changes to this policy

We may update this Cookie Policy from time to time. Any changes will be posted on this page, and the "Last updated" date will be revised.

8. Contact us

If you have any questions about this Cookie Policy, you can contact us at:

Email: privacy@lumai.ai

Post: Lumai Limited Wood Centre for Innovation, Quarry Road, Oxford, OX3 8SB United Kingdom.

You also have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk if you have concerns about how we handle your personal data, although we would appreciate the chance to address any concerns first.