Privacy Policy

Data controller

The data controller for personal data collected via onwhite.ai is:

Onwhite is an internal venture of LuVi ApS. Any reference to "we", "us", or "Onwhite" in this policy means LuVi ApS acting as controller.

What data we collect

When you submit the contact or sample-request form on onwhite.ai, we collect the information you provide, which may include:

• Your work email address
• Your brand name or website
• Your product category and approximate image volume
• Any additional information you provide in the free-text field (links, deadlines, etc.)

We do not collect payment data, special-category data, or any data beyond what you actively submit.

Why we process your data (purpose and lawful basis)

We process your personal data solely to:

• Respond to your enquiry
• Prepare and send you a sample quote or free sample packshots
• Administer any resulting agreement

The lawful basis for this processing is:

• Your consent — you provide it by submitting the form (GDPR Art. 6(1)(a))
• Steps taken at your request prior to a possible contract — preparing a quote or sample is a pre-contractual activity (GDPR Art. 6(1)(b))

If we enter into a contract, we will retain relevant data as required by applicable Danish accounting and contract law, under Art. 6(1)(c) (legal obligation).

How long we keep your data

We keep enquiry data (form submissions and correspondence) for up to 12 months from the date of submission, unless we enter into a contract or agreement, in which case data is retained for as long as required by applicable law (typically 5 years under Danish bookkeeping rules).

At the end of the applicable retention period, your data is securely deleted.

Who we share your data with

We do not sell or share your personal data for marketing purposes. We may share data with:

• Service providers acting as processors on our behalf (e.g. email and infrastructure providers), bound by data-processing agreements.
• Authorities where required by applicable law.

We do not transfer your data outside the EU/EEA without appropriate safeguards in place.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Erase your data (where no overriding legal basis applies)
• Restrict or object to processing
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
• Data portability (where technically feasible)
• Lodge a complaint with the Danish Data Protection Authority (datatilsynet.dk)

To exercise any of these rights, email us at privacy@onwhite.ai. We will respond within 30 days.

AI disclosure

The Onwhite service produces AI-generated product imagery. Source images you supply to Onwhite are used solely to produce the packshots you requested. We do not use your supplied images to train AI models without your explicit, separate consent.

Contact

For any privacy-related questions or to exercise your rights: