Privacy policy
PDPA-aligned privacy policy for Lumen Financial Planning — how inquiry data is handled on api-lumen.digital.
Privacy notice revised: 7 October 2026
1. Data controller
Lumen Financial Planning Co., Ltd. (บริษัท Lumen Financial Planning จำกัด)
43/9,Charoen Krung Road,Bang Rak, 10500 Bangkok, Thailand
Email: info@api-lumen.digital
Phone: +66-2-235-7419
Tax ID (TIN): 0105504637375
We act as the data controller for personal data collected through this website and related consultation scheduling.
2. Scope and Thai PDPA framing
This policy explains how we process personal data under Thailand’s Personal Data Protection Act (PDPA) B.E. 2562. The site is published in English for business visitors; your statutory rights apply regardless of language.
3. What we collect
| Source | Data | Purpose |
|---|---|---|
| Inquiry form | Name, email, optional phone, topic, message | Respond to your request and schedule consultations |
| Cookie banner | Consent choice (stored locally in your browser) | Record whether you accepted or rejected non-essential storage |
| Email/phone contact | Whatever you choose to share | Provide planning services you request |
We do not run analytics, advertising pixels, or social plugins on this site. No behavioral profiles are created from your browsing here.
4. Legal bases
- Contract / pre-contract steps: handling inquiries and delivering paid planning engagements you request.
- Legitimate interests: replying to business questions and maintaining basic security of our form endpoint.
- Consent: storing your cookie preference when you interact with the banner (essential for honoring your choice).
5. Where inquiry data goes
When you submit the contact form, your browser sends a JSON payload via POST to /api/inquiry on api-lumen.digital—the same domain as this site. A server-side handler we operate receives the message so staff can email you back. Data is not sold to list brokers or used for unrelated marketing.
6. Retention
- Inquiry records: up to 24 months after last contact, unless a longer period is needed for accounting or dispute resolution.
- Planning client files: duration of the engagement plus 7 years for business records where required.
- Consent choice: remains in your browser until you clear site data or change preferences via the footer link.
7. International transfers
Primary processing occurs in Thailand. If we use email or hosting providers with servers abroad, we rely on contractual safeguards appropriate to PDPA requirements.
8. Your rights
You may request access, correction, deletion, restriction, objection, and portability where applicable. Withdraw consent for non-essential storage at any time via the cookie controls. To exercise rights, email info@api-lumen.digital with enough detail for us to verify your request.
9. Security
We use HTTPS, access controls on inquiry storage, and staff training on confidentiality. No method is perfectly secure; please avoid sending full account numbers through the open form—we will arrange a secure channel if needed.
10. Children
Services are directed at adults managing household finances. We do not knowingly collect data from children under 20 without guardian involvement.
11. Changes
We will post updates on this page with a revised date. Material changes affecting prior inquiries will be communicated when feasible.
12. Complaints
You may contact us first at info@api-lumen.digital. You also have the right to lodge a complaint with Thailand’s Personal Data Protection Committee when applicable.