Privacy Policy

Who we are

Onwhite is an internal venture of LuVi ApS, a company registered in Denmark. LuVi ApS is the data controller for all personal data collected through this website and related enquiry processes. If you have questions about this policy or your data, please write to privacy@onwhite.ai.

What we collect and why

When you submit an enquiry through our sample request form, we collect the information you provide — typically your work email address, brand name or website, the product category you sell, an approximate product count, and any notes you choose to include. We collect this information for two purposes:

• To respond to your enquiry and communicate with you about Onwhite's services.
• To prepare a sample quote or illustrative packshot relevant to your brand.

We also collect standard server-side access logs (IP address, browser type, page visited, timestamp) to operate and secure the site. These are not linked to your identity.

Lawful basis

We process your enquiry data on the basis of:

• Your consent (GDPR Art. 6(1)(a)) — you provide your details voluntarily when you submit the form.
• Steps taken at your request prior to a possible contract (GDPR Art. 6(1)(b)) — preparing a sample or quote constitutes pre-contractual steps at your request.

How long we keep your data

We keep enquiry data for up to 12 months from the date of your enquiry, unless we enter into an agreement with you, in which case data is retained for as long as required by law or the terms of that agreement. After the retention period, your data is deleted or anonymised.

Who we share data with

We do not sell your personal data. We do not share your data with third parties for marketing purposes. We may use service providers (such as cloud infrastructure or email delivery providers) who process data on our behalf under appropriate data processing agreements. Any such providers are bound by equivalent data protection obligations.

International transfers

LuVi ApS is based in Denmark (an EU member state). If any of our service providers are located outside the EEA, we ensure that adequate safeguards are in place — for example, Standard Contractual Clauses approved by the European Commission.

Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Access — you can request a copy of the personal data we hold about you.
• Correction — you can ask us to correct inaccurate or incomplete data.
• Erasure — you can ask us to delete your data where there is no overriding lawful basis for us to retain it.
• Withdrawal of consent — where processing is based on your consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Restriction and objection — you can ask us to restrict or stop processing your data in certain circumstances.
• Portability — you can ask us to provide your data in a structured, machine-readable format.
• Complaint — you have the right to lodge a complaint with the Danish Data Protection Authority (datatilsynet.dk) or the supervisory authority in your country of residence.

To exercise any of these rights, email us at privacy@onwhite.ai. We will respond within one month.

Cookies and tracking

We aim to keep the site free of unnecessary tracking. At this stage, we do not use third-party advertising or analytics cookies. If this changes, we will update this policy and obtain any required consent before placing such cookies.

Changes to this policy

We may update this policy from time to time. Material changes will be noted with a revised effective date at the top of this page. Continued use of the site after an update constitutes acknowledgement of the changes.

Contact

Controller: LuVi ApS, Denmark
Data enquiries: privacy@onwhite.ai