Privacy Policy
Effective Date: January 15, 2025
At Luminous Flareon, we take your privacy seriously. This document explains how we collect, use, and protect your personal information when you interact with our services. We've designed our approach to comply with Thailand's Personal Data Protection Act (PDPA) B.E. 2562 and international standards.
Information We Collect
We gather different types of information depending on how you use our platform. Some data you provide directly—other information gets collected automatically as you navigate our services.
Personal Information You Provide
- Contact details including your name, email address, phone number, and business address
 - Account credentials and security information you create during registration
 - Financial information related to investment strategies and portfolio preferences
 - Communications you send to our support team or through inquiry forms
 - Professional background details relevant to investment experience assessment
 
Automatically Collected Data
- Technical details like IP address, browser type, device information, and operating system
 - Usage patterns including pages visited, time spent, and interaction with features
 - Cookie data that helps us remember your preferences and improve functionality
 - Performance metrics from machine learning algorithms when you use our tools
 
How We Use Your Information
Your data serves specific purposes—we don't collect information just to have it sitting around. Here's what we actually do with what we gather:
- Deliver and maintain our machine learning investment analysis services
 - Create and manage your account while securing your access
 - Process your requests and provide customer support when you need assistance
 - Send important updates about service changes, security alerts, or policy modifications
 - Improve our algorithms and platform functionality based on usage patterns
 - Comply with legal obligations under Thai law and international regulations
 - Detect and prevent fraudulent activity or security threats
 
We won't use your personal data for purposes beyond what you've consented to without asking first.
Legal Basis for Processing
Under Thailand's PDPA, we need a valid reason to process your personal information. We rely on several legal grounds:
| Processing Purpose | Legal Basis | 
|---|---|
| Service delivery and account management | Contract performance | 
| Platform improvements and analytics | Legitimate business interests | 
| Marketing communications | Your explicit consent | 
| Regulatory compliance and reporting | Legal obligation | 
| Security and fraud prevention | Legitimate interests and legal compliance | 
Data Sharing and Disclosure
We don't sell your personal information. Period. But we do share data with certain parties when necessary for business operations or legal requirements.
Service Providers
We work with third-party companies that help us run our platform—cloud hosting providers, payment processors, analytics services. These partners only access information needed for their specific tasks and are contractually bound to protect your data.
Business Transfers
If Luminous Flareon gets acquired or merges with another company, your information might transfer to the new entity. We'll notify you before this happens and explain any changes to how your data gets handled.
Legal Requirements
Sometimes we're legally required to share information—court orders, regulatory investigations, or responding to government requests. We'll push back on overly broad demands and notify you when legally permitted.
With Your Consent
For anything outside these categories, we'll ask your permission first.
International Data Transfers
Some of our service providers operate outside Thailand. When we transfer data internationally, we ensure appropriate safeguards are in place—standard contractual clauses, adequacy decisions, or other approved mechanisms under Thai law. Your data receives protection regardless of where it's processed.
Your Privacy Rights
Thai law gives you substantial control over your personal information. You can exercise these rights by contacting us through the details at the bottom of this page.
Access and Portability
Request a copy of the personal data we hold about you. We'll provide it in a commonly used electronic format within 30 days. If you want to transfer this information to another service, we'll help make that happen.
Correction and Updates
Found something inaccurate? Let us know and we'll fix it. You can update most information directly through your account settings.
Deletion and Erasure
Ask us to delete your personal information, and we'll comply unless we have a legitimate reason to keep it—like ongoing legal obligations or unresolved disputes. Some data might remain in backup systems for a limited period.
Restriction and Objection
You can request we limit how we process your data or object to certain uses—particularly marketing activities. We'll honor these requests except where we have compelling legitimate grounds.
Consent Withdrawal
Changed your mind about something you previously agreed to? Withdraw your consent anytime. This won't affect processing that already happened based on your earlier consent.
Filing Complaints
If you're unhappy with how we've handled your data, contact us first so we can address your concerns. You also have the right to file a complaint with Thailand's Personal Data Protection Committee.
Data Security Measures
We've implemented technical and organizational safeguards to protect your information from unauthorized access, alteration, or destruction.
- Encryption of data in transit and at rest using industry-standard protocols
 - Regular security audits and vulnerability assessments of our systems
 - Access controls ensuring only authorized personnel can view personal data
 - Secure authentication mechanisms including multi-factor options
 - Employee training on data protection and privacy best practices
 - Incident response procedures for potential security breaches
 
No system is completely secure, but we continuously work to strengthen our defenses. If a breach occurs that might affect you, we'll notify you promptly as required by law.
Data Retention
We keep your personal information only as long as necessary for the purposes outlined here. Different types of data have different retention periods:
- Account information remains active until you request deletion or close your account
 - Transaction records are retained for seven years to meet Thai accounting and tax requirements
 - Communications and support tickets stay in our systems for three years
 - Analytics and usage data gets anonymized after two years
 - Marketing consent records are maintained until you withdraw permission
 
After retention periods expire, we securely delete or anonymize your information so it can't be linked back to you.
Cookies and Tracking
Our platform uses cookies—small text files stored on your device that help us provide better service. You can control cookie settings through your browser, though some features might not work properly if you disable them.
Types of Cookies We Use
- Essential cookies that make the platform function—these can't be disabled
 - Performance cookies helping us understand how you use our services
 - Functionality cookies remembering your preferences and settings
 - Analytics cookies providing insights for platform improvements
 
We don't use advertising cookies or share cookie data with advertising networks.
Children's Privacy
Our services aren't designed for individuals under 20 years old. We don't knowingly collect information from minors. If you're a parent who discovers your child has provided us with personal information, contact us immediately and we'll delete it.
Changes to This Policy
We update this privacy policy occasionally to reflect changes in our practices or legal requirements. When we make significant modifications, we'll notify you through email or a prominent notice on our platform at least 30 days before changes take effect.
The date at the top shows when this policy was last revised. Continuing to use our services after changes become effective means you accept the updated terms.
Third-Party Services
Our platform might link to external websites or integrate with third-party services. This privacy policy doesn't cover those external services—they have their own policies and practices. We encourage you to review their terms before sharing information with them.
Automated Decision Making
Our machine learning algorithms analyze investment strategies and market patterns. While these systems provide recommendations, they don't make final decisions about your investments without human oversight. You always maintain control over your investment choices. If you have concerns about how our algorithms process your data, contact us for more information about the logic involved.
Contact Our Privacy Team
Questions about this policy or how we handle your data? Reach out to our privacy team:
	Luminous Flareon
	5, 7 Buppha Buri Alley, Chong Nonsi
	Yan Nawa, Bangkok 10120, Thailand
	
	Email: info@luminousflareon.com
	Phone: +66 2 832 5041
	
We typically respond to privacy inquiries within five business days.