Last updated 29 June 2026
This policy explains how Lucuma, a product of Marvanova Ltd ("we", "us"), collects, uses and protects personal data. We are committed to handling data lawfully, fairly and transparently under the UK GDPR and the Data Protection Act 2018.
Marvanova Ltd (company registration no. 17280852), United Kingdom, is the data controller for personal data relating to our account holders and website visitors. You can contact us at hello@marvanova.com.
We use account and usage data to provide, secure, support and improve the service, to manage billing, and to communicate with you about your account. We process candidate data only to generate your screening results.
Candidate CV data is processed solely to produce your screening results and is not stored on our servers after your session ends. All processing takes place within the EU, and candidate data is never used to train AI models. For candidate data, you (or your organisation) are the data controller and we act as your data processor. Agency and Enterprise plans include a full Data Processing Agreement that sets out these responsibilities.
We rely on contract (to provide the service you sign up for), legitimate interests (to operate, secure and improve the service), and consent (for non-essential cookies). Where we act as a processor for candidate data, our customer is responsible for establishing the lawful basis for that processing.
We do not sell personal data. We use a small number of trusted infrastructure and AI processing providers strictly to deliver the service, each bound by contractual data protection terms. A current list of sub-processors is available on request.
Personal data processed to deliver screening results is handled within the EU. Where any transfer outside the UK or EEA is necessary, we use appropriate safeguards such as standard contractual clauses.
Candidate CV data is not retained after your session. Account data is kept for as long as you have an account and for a reasonable period afterwards to meet legal and accounting obligations.
Under UK GDPR you have rights to access, rectify, erase, restrict and object to processing of your personal data, and to data portability. To exercise these rights, email hello@marvanova.com. You also have the right to complain to the Information Commissioner's Office (ICO).
We use essential and, with your consent, analytics cookies. See our Cookie Policy for details.
We use appropriate technical and organisational measures to protect personal data, including encryption in transit and access controls. No method of transmission or storage is completely secure, but we work to protect your data and review our measures regularly.
We may update this policy from time to time. The "last updated" date above reflects the latest version.
Questions about this policy or your data? Email hello@marvanova.com.