Privacy Notice

How we handle personal data

lumisanara collects contact and enrollment information to manage course registration, deliver program materials and communicate schedule updates. Data is stored securely and used only for program administration, basic reporting and optional course feedback. We do not sell personal data. Access to participant lists is limited to instructors and administrative staff on a need-to-know basis.

2026-04-28
lumisanara
[email protected]
Thanon Vibhavadi Rangsit, Bangkok District, Bangkok 10900, Thailand
7 Sections
4 Participant rights
180 Review every 180 days
Privacy policy cover image for lumisanara spiritual growth courses

Definitions

This section explains key terms used in the privacy policy to help you understand how lumisanara.collects and processes information related to courses and services for business leaders and entrepreneurs.

Personal data means any information that identifies or can reasonably be associated with an individual, for example a name, email address, phone number, payment information, or identifiers generated by devices or services.
Processing refers to any operation performed on personal data, whether automated or manual, including collection, storage, use, modification, disclosure, transfer, and deletion.
User denotes a visitor, registrant, participant, or prospective participant of lumisanara services and courses, including entrepreneurs, business owners, and company directors accessing content on lumisanara.click.
Service refers to the online and offline offerings provided by lumisanara, such as course registration, webinars, materials distribution, coaching sessions, and related administration.
Cookies are small text files stored on a user device that help lumisanara recognize returning visitors, support functionality, and provide analytics and relevant content during website sessions.

Data collection

We collect information that is necessary to provide course access, manage enrollments, process payments, communicate about services, and improve the website experience for entrepreneurs and business leaders.

Data you provide directly

When you register, contact us, or participate in a service, you may provide the following types of personal data:

  • Contact details: name, email address, phone number, mailing address for billing or course materials.
  • Registration information: organization name, job title, professional background and preferences related to course topics.
  • Payment and billing data: payment card details, billing address and transaction records when purchasing courses or services.
  • Communications: messages, emails, support requests, and feedback you submit to lumisanara.
  • Profile and preferences: course selections, attendance records, certificates and optional survey responses to improve course relevance.
  • Content you create: recordings, written submissions, and materials shared as part of course activities or coaching sessions.

Automatically collected data

When you interact with the website or digital services, some information is collected automatically to operate and analyze the platform and to provide secure access.

  • Device and technical data: device type, operating system, browser, IP address and unique device identifiers.
  • Usage data: pages visited, navigation paths, session duration and features used on lumisanara.click.
  • Analytics and performance data collected via cookies and similar technologies to understand and improve user experience.
  • Error and diagnostic data: crash reports, server logs and other information needed to maintain platform reliability.
  • Location data inferred from IP addresses for general geographic insights and to comply with local service requirements.
  • Security and fraud detection data used to prevent unauthorized access and to protect user accounts and payments.

Third-party data sources

We may receive information about you from third parties to facilitate services, payments and analytics, subject to their terms and applicable law.

  • Payment processors and business service providers to confirm transactions and manage billing.
  • Service providers for messaging, email delivery, analytics and hosting that process data on lumisanara's behalf.
  • Publicly available sources and business directories for verification of professional information or contact details.

Purposes of processing

We process personal data for legitimate operational reasons related to course delivery, administration, communication and legal compliance. Processing is carried out only to the extent necessary for each purpose.

  • To manage course registrations, enrollment, attendance records, certificate issuance and course-related administration.
  • To process payments, issue invoices, prevent fraud and fulfill business reconciliation requirements.
  • To communicate logistical information, course updates, responses to inquiries and customer support.
  • To provide and personalize course content, recommendations and learning paths based on stated preferences and participation history.
  • To analyze platform usage and performance to maintain, improve and secure the website and learning services.
  • To comply with legal obligations and respond to lawful requests from authorities or to enforce terms applicable to service use.
  • To conduct research and aggregated reporting on course effectiveness, participant engagement and program development (data used in aggregated or anonymized form where possible).
  • To send administrative notices and optional marketing communications where lawful and where you have consented or otherwise permitted such contact.
Diagram of data flow for lumisanara course services

Legal bases for processing

Where applicable, lumisanara relies on appropriate legal bases to process personal data, such as contractual necessity, legitimate interests, compliance with law and consent.

  • Contractual necessity: processing required to provide courses, handle payments and perform services you have requested.
  • Legitimate interests: processing for security, fraud prevention, platform improvement and direct communications related to purchased services.
  • Legal obligation: processing necessary to comply with applicable laws, tax rules and reporting obligations in Thailand and other jurisdictions.
  • Consent: where required for optional marketing, cookies beyond essential functionality, or other activities that rely on user consent.

Security

lumisanara takes practical measures to protect personal data against unauthorized access, disclosure, alteration or destruction. Security practices are reviewed periodically and adjusted to industry standards and the nature of the data processed.

  • Technical safeguards such as TLS encryption for data in transit, access controls and routine vulnerability assessments.
  • Organizational measures including role-based access management, staff training on data protection and documented handling procedures.
  • Operational measures such as regular backups, incident response planning and security monitoring of systems that process personal data.

Cookies and similar technologies

We use cookies and similar technologies to enable essential site functions, analyze usage and, where permitted, personalize content. You can manage cookie preferences as described below.

Types include essential cookies (required for site operation), preference cookies (save settings), analytics cookies (performance measurement) and marketing cookies (optional personalization and ads).

Essential, functional, performance/analytics and marketing categories are used to classify cookies and their purposes on lumisanara.click.

You can manage or disable non-essential cookies through your browser settings or via cookie controls presented on the site; disabling some cookies may affect functionality.

See the detailed cookie policy and list of cookies used on lumisanara.click

Sharing personal data

lumisanara may share personal data with service providers and partners as necessary to operate services, comply with the law, or protect rights and safety. Sharing is limited to the minimum required.

  • Payment and billing providers for processing transactions and complying with business record requirements.
  • Technical and hosting providers that support website operation, analytics and data storage under contractual terms.
  • Professional advisors, auditors or legal counsel when such disclosure is necessary for compliance, dispute resolution or legal advice.
  • Event or partner organizations for jointly provided programs, where participants have registered for combined services.
  • Authorities or law enforcement where disclosure is required by law or to respond to legally valid requests.
  • In cases of corporate restructuring, such as sale or transfer of assets, personal data may be transferred consistent with notice to affected users.

International data transfers

Personal data may be transferred to countries outside your jurisdiction to enable hosting, payment processing or other services. Transfers occur only with appropriate safeguards and legal mechanisms.

Where transfers occur, lumisanara implements safeguards such as standard contractual clauses, data processing agreements and restricted access to protect transferred personal data.

Data retention

Personal data is retained only as long as necessary to provide services, meet legal and accounting requirements, resolve disputes and enforce agreements.

Account and registration information is kept for the duration of the user relationship and for a period afterwards to satisfy administrative and legal obligations.

Correspondence and support communications are retained for a limited period to ensure service continuity and to address any follow-up issues.

Technical logs, access records and analytics data are stored for operational and security purposes for defined retention periods and then deleted or anonymized.

Upon request and subject to legal or contractual obligations, lumisanara will delete or anonymize personal data that is no longer necessary for the purposes described, unless retention is required by law.

Your rights

Depending on the applicable law, you may have rights in relation to your personal data. Requests are handled in accordance with local requirements and within reasonable timeframes.

  • Access: request confirmation of whether personal data is processed and obtain a copy of the data.
  • Rectification: request correction of inaccurate or incomplete personal data.
  • Erasure: request deletion of personal data where processing is no longer necessary or lawful grounds support removal.
  • Restriction: request restriction of processing under certain conditions.
  • Portability: request a structured, commonly used and machine-readable copy of personal data provided to lumisanara.
  • Objection: object to processing based on legitimate interests or to direct marketing activities.
  • Withdraw consent: where processing is based on consent, you may withdraw consent at any time for future processing.
  • Lodge a complaint with a supervisory authority if you consider processing to be non-compliant with applicable data protection laws.

How to exercise your rights

To exercise any rights, contact us using the contact details below. We may request information to verify your identity before processing requests to protect personal data from unauthorized disclosure.

[email protected]

We aim to respond to verifiable rights requests promptly and in accordance with applicable law, typically within 30 calendar days; complex requests may require additional time and will be communicated.

GDPR and international standards

Where the General Data Protection Regulation (GDPR) or similar privacy rules apply, lumisanara adheres to those standards to the extent relevant, including transparency, purpose limitation and data subject rights.

  • Principles: personal data is processed lawfully, fairly and in a transparent manner for specified purposes.
  • Lawful bases: processing is supported by appropriate legal bases such as contract performance, legitimate interests, legal obligation or consent.
  • Rights: individuals may exercise rights of access, rectification, erasure, portability, restriction and objection as described above.
  • Data protection measures: technical and organizational controls are applied to protect personal data and to minimize processing risks.
  • Contact and supervisory authority: users may contact lumisanara for inquiries or the competent supervisory authority for unresolved complaints.
  • Right to lodge a complaint with a supervisory authority in your jurisdiction if you believe your data protection rights have been infringed.

If you are an EU resident and consider that lumisanara has processed your personal data in a way that conflicts with applicable law, you may contact the relevant supervisory authority in your member state. lumisanara is based in Thailand and will cooperate with lawful requests from competent authorities.

Marketing communications

We may use your contact information to send course updates, event notices, and informational material about spiritual development programs tailored for entrepreneurs. Communications are factual and educational in tone and relate directly to services offered on lumisanara.click. You will receive only the categories of messages you consent to.

To stop receiving marketing messages, follow the unsubscribe link included in each message or send a request to [email protected]. Unsubscribe requests are processed promptly; you may still receive transactional messages about active enrollments.

Update notification illustration for lumisanara privacy policy

Children's privacy

Services and content on lumisanara are intended for adults and professionals. We do not knowingly collect personal data from persons under 16. If we become aware that we have collected data from a minor without appropriate consent, we will take steps to delete that information.

Third-party links

Pages on lumisanara.click may link to third-party websites or services (for example payment processors, booking platforms, or external reading materials). These links are provided for convenience. lumisanara does not control third-party privacy practices or site content and is not responsible for them. Review third-party privacy policies before providing personal data to those services.

Changes to this privacy policy

This privacy policy is effective as of 20-06-2026. We may update the policy to reflect legal or operational changes. Material changes will be posted on lumisanara.click with the updated effective date. Continued use of the site after updates indicates acceptance of the modified policy.