Privacy Policy
Last updated: July 8, 2026
This Policy explains what information LuxAvenor collects through its care coordination dashboard, how we use it, and the choices available to you.
1. Introduction
This Privacy Policy explains how LuxAvenor collects, uses, and protects information when a care home (the "Customer") and its staff use the LuxAvenor platform — a dashboard for admins and nurses to coordinate resident care, manage alerts and tasks, and generate AI-assisted reports. Where a facility also deploys LuxAvenor's optional room sensors, those feed signal data (movement, breathing, heart rate — never video or images) into the same dashboard; this Policy covers both.
2. Information We Collect
We collect: (a) account information for staff and administrators, such as name, email, and role; (b) resident and facility information entered by staff through the dashboard, such as room assignments, tasks, and care notes; (c) platform activity, including alerts, shift and incident reports, and AI-assisted report drafts generated as staff use the dashboard; (d) where a facility uses LuxAvenor's sensors, the signal data they generate — movement, breathing, and heart-rate readings used to raise alerts; and (e) usage and device information, such as log-in timestamps and device type, used to keep the Service secure and reliable.
3. How We Use Information
We use this information to operate the Service: powering the admin and nurse dashboards, routing alerts and tasks to available staff, drafting AI-assisted shift and incident reports for staff to review and sign off, maintaining audit-ready compliance records, and keeping the platform secure. We do not use this information for advertising, and we do not sell personal information.
4. Our Role & the Care Home's Role
For resident and facility data, the Customer (the care home) is the data controller and determines why and how that data is processed; LuxAvenor acts as a data processor, handling data only on the Customer's documented instructions and as needed to provide the Service. The Customer is responsible for having a lawful basis, and where required, resident or representative consent, for the monitoring carried out through the Service.
5. Data Sharing & Subprocessors
We do not sell personal information. We share data only: with subprocessors who help us run the Service (for example, our database and authentication infrastructure provider), under contracts requiring them to protect it; when required by law or valid legal process; or with the Customer's consent. Any subprocessor with access to Customer Data is bound by confidentiality and data protection obligations at least as strict as those in this Policy.
6. Data Security
We apply role-based access controls so staff only see data relevant to their role (nurse, admin, or platform), encrypt data in transit, and rely on our infrastructure provider's security safeguards for data at rest. No system is completely secure, and we continually review our practices as the platform evolves.
7. Data Retention
We retain resident and facility data for as long as the Customer's subscription is active and as needed to provide the Service, including maintaining audit-ready incident records for compliance purposes. When a Customer's account is closed, we delete or anonymize Customer Data within a reasonable period, except where retention is required by law or agreed in writing with the Customer.
8. Your Rights
Depending on your location and applicable law, you may have rights to access, correct, export, or request deletion of your personal information, and to object to or restrict certain processing. Because resident data is controlled by the care home, requests about resident information should generally go through the Customer facility first; staff account requests can be sent directly to us at info@luxavenor.com.
9. International Data Transfers
Where data is transferred across borders — for example, to a subprocessor's infrastructure in another country — we require appropriate safeguards, such as standard contractual clauses or an equivalent mechanism recognized under applicable data protection law.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to the Service or applicable law. We will post the updated Policy here with a new "Last updated" date, and for material changes, will make reasonable efforts to notify facility administrators in advance.
11. Contact
Questions about this Privacy Policy or how your information is handled can be sent to info@luxavenor.com.