Privacy Policy

Introduction

lumen dats ("we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage with our artificial intelligence engineering services.

This policy complies with Thailand's Personal Data Protection Act (PDPA) B.E. 2562 and outlines your rights regarding your personal data.

Information We Collect

Personal Information

When you contact us or request our services, we may collect:

• Name and contact information (email address, phone number)
• Company name and role
• Technical requirements and project details
• Communication preferences

Technical Data

During service engagements, we may process:

• System architecture information and technical documentation
• Performance metrics and monitoring data
• Log files and error reports (when necessary for troubleshooting)
• Code and configuration files (with appropriate permissions)

Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and browser type
• Pages visited and time spent on site
• Referring website information
• Device information and operating system

How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To provide machine learning operations, conversational AI design, and performance tuning services as requested
• Communication: To respond to inquiries, provide project updates, and send service-related information
• Technical Support: To diagnose issues, implement improvements, and maintain systems during engagements
• Documentation: To create technical documentation and operational guides specific to your implementation
• Quality Improvement: To analyze service effectiveness and refine our engineering methodologies
• Legal Compliance: To meet contractual obligations and comply with applicable laws

Legal Basis for Processing

Under the PDPA, we process your personal data based on:

• Consent: You have given explicit consent for processing your personal information
• Contract Performance: Processing is necessary for fulfilling our service agreements with you
• Legitimate Interest: Processing is necessary for our business operations while respecting your rights
• Legal Obligation: Processing is required to comply with Thai law or regulatory requirements

Data Sharing and Disclosure

We do not sell or rent your personal information. We may share data with:

Service Providers

Third-party vendors who assist with business operations (cloud hosting, email services). These providers are contractually obligated to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose information when required by law, court order, or government request, or when necessary to protect our legal rights.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Access controls limiting data access to authorized personnel
• Regular security assessments and updates
• Secure data storage in reputable cloud infrastructure
• Confidentiality agreements with all team members
• Audit logging for data access and modifications

While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but continuously work to improve our safeguards.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy:

• Contact Inquiries: 2 years from last communication
• Client Project Data: Duration of engagement plus 3 years for support purposes
• Technical Documentation: 5 years after project completion
• Financial Records: 7 years as required by Thai accounting regulations

When data is no longer needed, we securely delete or anonymize it.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Types of cookies we use:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our site
• Preference Cookies: Remember your settings and choices

You can manage cookie preferences through your browser settings or our cookie management tool. For more information, please see our Cookie Policy.

Your Rights Under PDPA

As a data subject under Thai law, you have the following rights:

Right to Access

Request access to your personal data we hold and receive a copy of it.

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data when it's no longer necessary or if you withdraw consent.

Right to Data Portability

Receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

Object to processing of your personal data based on legitimate interests or for direct marketing.

Right to Restriction

Request restriction of processing in certain circumstances.

Right to Withdraw Consent

Withdraw your consent at any time where processing is based on consent.

To exercise these rights, contact us at [email protected]. We will respond within 30 days as required by PDPA.

International Data Transfers

Your data is primarily stored within Thailand. If we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard contractual clauses approved by relevant authorities
• Transfers only to countries with adequate data protection levels
• Additional security measures for data in transit

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from someone under 18, we will promptly delete it.

Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

For questions about this Privacy Policy or our data practices, please contact: