Privacy Policy
Last updated: 12 May 2025
Lumengrid ("we", "us", "our") operates an online AI development school accessible at lumengrid.pro. This policy explains what personal data we collect when you visit our website or enrol in a course, how we use it, and what choices you have. We follow Thai data protection law — the Personal Data Protection Act B.E. 2562 (PDPA) — and apply its principles across all our operations.
1. Data We Collect
We collect personal data only when you provide it to us or when it is generated by your interaction with our website.
Information You Give Us
- › Full name and email address from contact or enrolment forms
- › Phone number, if you choose to include it
- › Messages and queries submitted through the website
- › Payment details processed securely via our payment provider (we do not store card data ourselves)
Information Collected Automatically
- › IP address and general location (country/region)
- › Browser type, device type, operating system
- › Pages visited, time spent, links clicked
- › Referral source (how you arrived at our site)
Retention periods: Contact form data is kept for up to 3 years to handle follow-up queries. Course enrolment records are retained for 7 years for accounting and legal compliance. Analytics data is aggregated and anonymised after 26 months. You may request deletion at any time (see Section 6).
2. Legal Basis for Processing
Under the PDPA, we rely on the following legal grounds:
Processing necessary to fulfil a course enrolment or respond to an enquiry you have made.
Optional analytics and marketing cookies, where you have given consent through our cookie controls.
Retaining financial records as required by Thai accounting regulations.
Improving our website and course materials based on aggregated, anonymised usage patterns.
3. How We Use Your Data
- Responding to enquiries and processing course enrolments
- Sending course materials, access credentials, and administrative notices relating to your enrolment
- Analysing how learners use the website so we can improve course content and navigation (using anonymised data only)
- Sending occasional updates about new courses or schedule changes — you may unsubscribe at any time
- Complying with our legal obligations under Thai law
We do not sell your data. We do not share personal data with third parties for their own marketing purposes.
4. Data Sharing with Third Parties
We share data with the following categories of third-party providers, each acting on our instructions:
| Provider type | Purpose | Data shared |
|---|---|---|
| Payment processor | Handling course payments | Name, email, transaction amount |
| Web analytics service | Understanding site usage | Anonymised usage data (with consent) |
| Email delivery service | Sending transactional emails | Name, email address |
| Hosting provider | Server infrastructure | Server logs (IP, access timestamps) |
We require all providers to maintain appropriate technical and organisational security measures and to process data only for the purposes specified.
5. How We Protect Your Data
Encryption in transit
All data transmitted between your browser and our servers uses TLS encryption.
Access controls
Only staff who need access to data to perform their role can view it, and only for that purpose.
Breach response
In the event of a breach affecting your data, we will notify you and the relevant authority within the timeframe required by law.
6. Cookies
We use cookies and similar technologies on our website. Essential cookies keep the site functioning; optional cookies (analytics, marketing, preferences) are only used with your consent.
For a full explanation of each cookie type and to manage your preferences, please see our Cookie Policy.
7. Your Rights Under the PDPA
As a data subject under Thai law, you have the following rights. To exercise any of them, contact us at [email protected].
Right to access
Request a copy of the personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Request deletion of your data, subject to our legal retention obligations.
Right to object
Object to processing based on legitimate interests or for direct marketing.
Right to portability
Receive your data in a structured, machine-readable format.
Right to withdraw consent
Where we rely on consent, you may withdraw it at any time without affecting prior processing.
If you believe your rights have not been respected, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.
8. External Links
Our website may include links to external sites (for example, reference articles or tools mentioned in course materials). We are not responsible for the privacy practices of those sites and encourage you to review their policies before sharing personal data with them.
9. Minimum Age
Our courses are intended for learners aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a person under 18 has submitted data to us, please contact us at [email protected] and we will remove it promptly.
10. Changes to This Policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. If changes are significant, we will notify enrolled learners by email. Continued use of the website after any update constitutes acceptance of the revised policy.
11. Contact for Data Enquiries
For any questions about this policy or to exercise your rights, please reach out to us. We aim to respond within 30 days.
Data enquiries
Phone
+66 44 318 6027
Address
240 Mittraphap Road, Nai Muang, Muang, Nakhon Ratchasima 30000, Thailand