Privacy Policy

1. Introduction

Datalume ("we", "us", "our") is committed to handling personal data responsibly. This policy explains what information we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.

This policy applies to all users of our website at datalumei.club and to learners enrolled in our programmes. If you have questions about anything here, you can reach us at [email protected].

2. Data Controller

Datalume is the data controller for personal data collected through this website and through programme enrolment. Our address is 154 Thanon Petchaburi, Thanon Phaya Thai, Ratchathewi, Bangkok 10400, Thailand.

3. Data We Collect

We collect only the data necessary to provide our services and operate our website:

• Contact enquiry data: Name, email address, and phone number submitted via our contact form.
• Programme enrolment data: Name, email address, and payment details collected during enrolment.
• Usage data: IP address, browser type, pages visited, and session duration collected via analytics tools.
• Cookie data: Preferences and session data stored via cookies. See our Cookie Policy for details.

4. Legal Basis for Processing

We process personal data on the following legal grounds under the Thailand Personal Data Protection Act (PDPA) B.E. 2562:

• Consent: For analytics and marketing cookies, and for sending programme updates.
• Contract: For processing data necessary to deliver a programme you have enrolled in.
• Legitimate interest: For basic website operation and security.

5. How We Use Your Data

• To respond to enquiries submitted through our contact form.
• To administer programme enrolment, materials access, and mentor scheduling.
• To send programme-related communications (session updates, feedback notifications).
• To understand how the website is used so we can improve it.
• To comply with applicable legal obligations.

6. Data Retention

• Contact enquiry data: retained for 12 months from the date of enquiry.
• Programme enrolment records: retained for 3 years from the end of the programme.
• Financial records: retained for 5 years in accordance with Thai accounting regulations.
• Analytics data: retained for 14 months from collection.

7. Data Sharing

We do not sell personal data. We share data with third parties only in the following circumstances:

• Service providers: Hosting, email delivery, and payment processing providers who are contractually required to protect the data.
• Analytics: Aggregated, anonymised usage data may be processed by analytics tools.
• Legal requirements: When required by Thai law or a lawful order from a competent authority.

8. Data Protection Measures

• Data in transit is encrypted using TLS.
• Access to personal data is restricted to staff who need it to fulfil their role.
• We review our data handling practices and security measures periodically.
• In the event of a personal data breach that poses a risk to individuals, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay.

9. Cookies

We use cookies to enable basic site functionality and, with your consent, to gather analytics data. You can manage cookie preferences at any time via our Cookie Policy page.

10. Your Rights

Under the PDPA (Thailand), you have the following rights in relation to your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no lawful reason for us to continue processing it.
• Right to data portability: Request your data in a machine-readable format.
• Right to object: Object to processing based on legitimate interest.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Right to lodge a complaint: You may lodge a complaint with Thailand's Office of the Personal Data Protection Committee (PDPC) if you believe your data has been handled unlawfully.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately.

12. Children's Privacy

Our programmes and services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.

13. Changes to This Policy

We may update this policy from time to time. When we make significant changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after changes are published constitutes acceptance of the updated policy.

14. Contact

For questions about this policy or to exercise your rights:

• Email: [email protected]
• Phone: +66 2 583 6914
• Address: 154 Thanon Petchaburi, Thanon Phaya Thai, Ratchathewi, Bangkok 10400, Thailand