Privacy Policy

1. Introduction

Lumora ("we", "us", "our") is committed to protecting the personal data of everyone who uses our website, enquires about our programmes, or participates in any Lumora education offering. This policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to it.

We are based at No. 17, Jalan Mahkota, 25000 Kuantan, Pahang, Malaysia, and operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have any questions about this policy, please contact us at [email protected].

2. What Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, and phone number (when provided through our contact form).
• Enrolment data: name, contact details, and programme selection when you register for a Lumora programme.
• Usage data: standard website logs including IP address, browser type, pages visited, and time spent — collected via analytics tools.
• Cookie data: see our Cookie Policy for details.

Legal basis: We process your data on the basis of your consent (for contact form submissions and marketing), contractual necessity (for programme delivery), and legitimate interest (for website analytics and service improvement).

Retention: Contact enquiry data is retained for up to 24 months. Participant programme data is retained for up to 5 years for record-keeping purposes. Analytics data is retained in aggregated form.

3. How We Use Your Data

We use your personal data for the following purposes:

• Responding to enquiries and providing programme information
• Delivering education programmes and sending relevant session materials
• Sending programme updates or reminders (with your consent)
• Issuing certificates of attendance where applicable
• Improving our website and programmes through aggregated usage analysis
• Meeting legal and record-keeping obligations

We do not sell your personal data to third parties. We do not use your data for targeted advertising. If we share data with a third-party service provider (such as an email platform or analytics tool), it is under a data processing agreement and solely for the stated purpose.

4. How We Protect Your Data

We take reasonable technical and organisational steps to protect personal data from unauthorised access, loss, or disclosure. These measures include:

• Encrypted data transmission (HTTPS/TLS) on our website
• Access to personal data restricted to authorised Lumora team members
• Regular review of our data handling practices
• Prompt notification if a data breach occurs that may affect your rights

5. Cookies

We use essential, analytics, and preference cookies on our website. Essential cookies are necessary for the site to function. Others are optional and require your consent. For full details, please see our Cookie Policy.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by Lumora:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may ask us to correct inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time.
• Right to limit processing: You may request that we restrict how we use your data in certain circumstances.
• Right to lodge a complaint: You may contact the Department of Personal Data Protection Malaysia (JPDP) if you believe your data rights have been breached.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may include links to external websites or resources. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review their privacy policies before providing any personal information.

8. Children's Privacy

Our programmes are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected such data, please contact us and we will remove it promptly.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy. We recommend reviewing this page periodically.