Last updated: April 2026
This Privacy Policy explains how Kumimatsushita.com, operating under the business name Inlumino, collects, uses, and protects personal data collected through this website (kumimatsushita.com), in accordance with the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (Uitvoeringswet AVG).
1. Data Controller
Kumi Matsushita / Inlumino
Westerstraat 10 A7043,
Rotterdam, The Netherlands
BTW-ID: NL004690673B65
Email: hello@kumimatsushita.com
2. What Personal Data We Collect
Via the contact form (WPForms):
- Name
- Email address
- Message content
Automatically via website usage:
- IP address (anonymised)
- Browser type and version
- Pages visited and time spent
- Device and operating system information
3. Purposes and Legal Basis for Processing
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to enquiries submitted via the contact form | Name, email, message | Legitimate interest (Art. 6(1)(f) GDPR) |
| Website analytics and performance measurement | Anonymised IP, browsing behaviour | Consent (Art. 6(1)(a) GDPR) |
| Spam and bot prevention via reCAPTCHA | Browser data, interaction behaviour | Legitimate interest (Art. 6(1)(f) GDPR) |
| Website hosting and infrastructure | IP address, server logs | Legitimate interest (Art. 6(1)(f) GDPR) |
4. Third-Party Services
This website uses the following third-party services, which may process personal data on our behalf:
Google Analytics 4
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Purpose: Website traffic analysis.
Data transferred: Anonymised IP address, browsing behaviour, device information.
IP anonymisation is enabled by default in GA4. Data is not used for advertising purposes.
Google Privacy Policy
Google reCAPTCHA
Provider: Google Ireland Limited.
Purpose: Protection against spam and automated bot submissions in the contact form.
Data transferred: Browser and interaction data sent to Google’s servers for verification.
Google Privacy Policy
Hostinger
Provider: Hostinger International Ltd, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.
Purpose: Website hosting and infrastructure.
Data transferred: Server logs including IP addresses, processed within the EU/EEA.
Hostinger Privacy Policy
WPForms
Provider: WPForms LLC, USA (data processed via this website’s server).
Purpose: Contact form functionality.
Data transferred: Form submissions (name, email, message) stored on this website’s server.
WPForms Privacy Policy
Complianz
Provider: Really Simple Plugins, The Netherlands.
Purpose: Cookie consent management.
Data transferred: Consent records stored locally on this website’s server. No data is sent to external servers.
Complianz Privacy Policy
5. Data Retention
| Data | Retention period |
|---|---|
| Contact form enquiries | 2 years from date of receipt |
| Google Analytics data | 14 months (GA4 default setting) |
| Cookie consent records | 1 year |
| Server logs (Hostinger) | As per Hostinger’s data retention policy |
6. Your Rights
Under the GDPR, you have the following rights with respect to your personal data:
- Right of access — You may request a copy of the personal data we hold about you.
- Right to rectification — You may request correction of inaccurate or incomplete data.
- Right to erasure — You may request deletion of your personal data, subject to legal obligations.
- Right to restriction of processing — You may request that we limit how we use your data.
- Right to data portability — You may request your data in a structured, machine-readable format.
- Right to object — You may object to processing based on legitimate interests.
- Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact: hello@kumimatsushita.com. We will respond within one month.
7. Cookies
This website uses cookies. For detailed information about which cookies are used and how consent is managed, please refer to our Cookie Policy.
8. Complaints
If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Dutch supervisory authority:
Autoriteit Persoonsgegevens (AP)
Website: www.autoriteitpersoonsgegevens.nl
Telephone: +31 (0)70 888 85 00
9. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.