Privacy Policy
Last Updated: January 15, 2025
At Lumora Bright, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you interact with our trading education platform. We're committed to being transparent about our practices and giving you control over your data.
1. Information We Collect
We gather different types of information to provide you with quality trading education services. Some data you provide directly, while other information is collected automatically as you use our platform.
Account Information
Your name, email address, phone number, and password when you register for our courses or programs.
Payment Details
Billing information and transaction history when you purchase educational materials or enroll in paid programs.
Learning Activity
Course progress, quiz results, forum participation, and interaction with educational content on our platform.
Technical Data
IP address, browser type, device information, and usage patterns to improve our services and troubleshoot issues.
Cookies and Tracking Technologies
We use cookies and similar technologies to remember your preferences, analyze how you use our site, and personalize your learning experience. You can control cookie settings through your browser, though some features may not work properly if you disable them.
2. How We Use Your Information
Your data helps us deliver better educational experiences and support. Here's what we do with the information we collect:
- Deliver Educational Services: Process enrollments, track your progress, provide access to course materials, and issue certificates upon completion.
- Communicate With You: Send course updates, respond to inquiries, share relevant educational content, and notify you about changes to our services.
- Improve Our Platform: Analyze usage patterns to enhance course quality, fix technical issues, and develop new educational offerings.
- Process Payments: Handle billing, prevent fraud, and maintain accurate financial records for your transactions.
- Personalize Learning: Recommend courses based on your interests and progress, tailor content to your skill level, and create customized learning paths.
- Comply With Legal Obligations: Meet requirements under Thai law and international regulations, respond to legal requests, and protect our rights.
Thailand Data Protection Context
We comply with the Personal Data Protection Act B.E. 2562 (PDPA), which governs how organizations in Thailand handle personal information. This means we process your data lawfully, limit collection to what's necessary, and ensure appropriate security measures are in place.
3. Sharing Your Information
We don't sell your personal data to third parties. However, we may share information with trusted partners who help us operate our business:
- Service Providers: Companies that assist with payment processing, email delivery, hosting services, and analytics tools.
- Educational Partners: Instructors and course creators who need access to student data to deliver their programs effectively.
- Legal Requirements: Government authorities when required by law, court orders, or to protect our legal rights.
- Business Transfers: Potential buyers or successors if our company is acquired or merged with another organization.
All third parties we work with are required to protect your data and use it only for the specific purposes we've authorized. We conduct regular reviews to ensure they meet our privacy standards.
4. Your Privacy Rights
Under Thai law and our commitment to transparency, you have several rights regarding your personal information. Here's what you can do:
What You Can Request
Access Your Data: Request a copy of the personal information we hold about you, including details about how we use it.
Correct Inaccuracies: Update or fix any incorrect or incomplete information in your account at any time.
Delete Your Information: Request removal of your data when it's no longer needed or if you withdraw consent.
Restrict Processing: Limit how we use your data in certain situations, such as while we verify accuracy.
Data Portability: Receive your data in a structured format to transfer to another service provider.
Object to Processing: Stop certain uses of your data, particularly for marketing purposes.
To exercise any of these rights, contact us using the details at the bottom of this page. We'll respond within 30 days and may need to verify your identity before processing your request. Some requests might be limited by legal requirements or legitimate business needs.
5. Data Security Measures
We protect your information through multiple layers of security. While no system is completely foolproof, we've implemented industry-standard safeguards to keep your data safe.
Our Security Approach
Encryption
All data transmitted between your device and our servers uses SSL/TLS encryption protocols.
Access Controls
Only authorized personnel can access personal data, with permissions based on job requirements.
Secure Storage
Databases are protected with firewalls and monitored continuously for suspicious activity.
Regular Audits
We conduct periodic security assessments and update our practices to address emerging threats.
If we discover a data breach that affects your information, we'll notify you promptly and take immediate action to minimize any potential harm. We also report incidents to relevant authorities as required by law.
6. Data Retention
We keep your information only as long as necessary to provide our services and meet legal obligations. Different types of data have different retention periods:
- Account Data: Retained while your account is active and for up to 7 years after closure for legal and tax purposes.
- Course Records: Learning progress and certificates are kept indefinitely to maintain educational records and verify completion.
- Payment Information: Financial records are stored for 10 years to comply with Thai accounting regulations.
- Marketing Data: Removed immediately upon unsubscribing or within 2 years of inactivity.
- Technical Logs: Automatically deleted after 90 days unless needed for security investigations.
When data is no longer needed, we securely delete or anonymize it so it can't be traced back to you. You can request earlier deletion by contacting us, though some data must be retained for legal reasons.
7. International Data Transfers
Our primary servers are located in Thailand, but some of our service providers operate in other countries. When we transfer data internationally, we ensure appropriate safeguards are in place through:
- Standard contractual clauses approved by data protection authorities
- Certification programs that demonstrate adequate privacy protections
- Explicit consent from you where required by law
We carefully vet all international partners to ensure they maintain privacy standards comparable to those required in Thailand.
8. Children's Privacy
Our services are designed for adults interested in trading education. We don't knowingly collect information from anyone under 18 years old. If you're a parent who believes your child has provided us with personal data, please contact us immediately so we can delete it.
9. Changes to This Policy
We update this privacy policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you through email or a prominent notice on our website. The "Last Updated" date at the top shows when the most recent revisions were made.
Continuing to use our services after changes take effect means you accept the updated policy. We encourage you to review this page periodically to stay informed about how we protect your information.
10. Third-Party Links
Our platform may contain links to external websites, resources, or tools that aren't operated by us. We're not responsible for the privacy practices of these third parties. When you leave our site, we encourage you to read the privacy policies of any website you visit.
Questions About Your Privacy?
If you have concerns about how we handle your data or want to exercise your privacy rights, we're here to help. Reach out through any of these channels: