Privacy Policy

1. Introduction

Lumiivexxdss ("we," "us," or "our") is committed to protecting the privacy and personal data of individuals who interact with our services. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Thailand's Personal Data Protection Act (PDPA) B.E. 2562 (2019) and applicable international data protection standards.

This policy applies to all visitors of our website, clients who engage our AI advisory services, and individuals who contact us through any communication channel. If you have questions about this policy, please reach out to us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

Information you provide directly: Your name, email address, phone number, company name, job title, and any message content submitted through our contact forms or email correspondence.

Information collected automatically: IP address, browser type and version, operating system, referring URL, pages visited, time spent on pages, and general geographic location derived from IP data.

Cookies and similar technologies: We use cookies to analyze website usage and improve your browsing experience. See our Cookie Policy for detailed information.

3. How We Use Your Data

We process your personal data for the following purposes:

Service delivery: To respond to inquiries, prepare proposals, deliver AI advisory services, and communicate about active engagements.

Communication: To send you information relevant to your inquiry or ongoing project. We will not send marketing communications without your explicit consent.

Website improvement: To analyze how visitors use our website and improve its functionality and content.

Legal compliance: To comply with applicable laws, regulations, and legal processes in Thailand.

4. Legal Basis for Processing

Under the PDPA, we process your personal data based on one or more of the following legal grounds: your explicit consent, the necessity to perform a contract or take pre-contractual steps at your request, compliance with a legal obligation, or our legitimate interests in operating and improving our business — provided those interests do not override your fundamental rights and freedoms.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy. Contact form submissions are retained for 24 months after the last interaction. Client project data is retained for 5 years following the completion of an engagement, unless a longer period is required by Thai law. Website analytics data is retained in anonymized form for 26 months.

6. Data Protection Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls limiting data availability to authorized personnel, regular security assessments, and incident response procedures for potential data breaches. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and affected individuals in accordance with the PDPA.

7. Third-Party Sharing

We do not sell your personal data. We may share data with trusted third-party service providers who assist in operating our website and delivering services, such as website hosting providers, analytics services (Google Analytics), and email communication platforms. These providers are contractually obligated to handle your data in accordance with this policy and applicable law. We may also disclose data when required by law or in response to valid legal process.

8. Cookies

Our website uses cookies to enhance your browsing experience and gather usage statistics. You can manage your cookie preferences through our cookie consent tool or your browser settings. For complete details on the types of cookies we use and how to control them, please visit our Cookie Policy.

9. Your Rights

Under the PDPA, you have the following rights regarding your personal data:

Right of access: You may request a copy of the personal data we hold about you.

Right to rectification: You may request that we correct inaccurate or incomplete data.

Right to erasure: You may request deletion of your personal data, subject to legal retention requirements.

Right to data portability: You may request your data in a structured, commonly used format.

Right to object: You may object to certain types of processing, including direct marketing.

Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

Right to lodge a complaint: You have the right to file a complaint with the Personal Data Protection Committee of Thailand.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

10. Third-Party Links

Our website may contain links to external websites that are not operated by us. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.

13. Contact Information

Data Controller: Lumiivexxdss

Address: 87 Sathon Nua Road, Silom, Bang Rak, Bangkok 10500, Thailand

Email: [email protected]

Phone: +66 2-481-7263