Information Collection and Usage

LottusPeak-PH collects information that you voluntarily provide when registering for our platform, enrolling in courses, or contacting our support team. This includes your name, email address, phone number, and educational preferences.

Our learning management system tracks your progress through courses, quiz results, and engagement metrics to provide personalized learning recommendations. This data helps us understand which educational materials are most effective for different learning styles.

Data Processing and Legal Basis

Under Thailand's Personal Data Protection Act (PDPA), we process your personal data based on the following legal grounds:

• Contractual necessity for providing educational services and platform access
• Legitimate interests in improving our educational content and platform functionality
• Legal compliance with Thai financial education regulations and tax requirements
• Your explicit consent for marketing communications and optional features

We ensure that all data processing activities are proportionate, necessary, and aligned with the purposes for which the data was originally collected.

Data Retention and Storage

Your personal data is stored on secure servers located in Thailand and compliant with local data residency requirements. We employ industry-standard encryption methods and access controls to protect your information from unauthorized access, alteration, or disclosure.

Data Sharing and Third Parties

We do not sell, rent, or trade your personal information to marketers or unrelated third parties. Any data sharing is limited to what is necessary for providing our educational services or meeting legal obligations.

Your Privacy Rights

To exercise any of these rights, please contact our Data Protection Officer using the information provided below. We will respond to your request within 30 days as required by Thai privacy laws.

Cookies and Tracking Technologies

Our platform uses essential cookies to maintain your session and remember your preferences. We also employ analytics cookies to understand how users interact with our educational content, helping us improve course effectiveness.

We use Google Analytics with anonymized IP addresses to track general usage patterns. No personally identifiable information is shared with Google beyond what is necessary for providing these analytics services.

Data Security Measures

LottusPeak-PH implements comprehensive security measures to protect your personal information. Our technical safeguards include SSL encryption for data transmission, regular security audits, and multi-factor authentication for administrative access.

We maintain administrative safeguards through employee privacy training, background checks for staff with data access, and strict need-to-know policies. Physical security measures protect our servers and backup systems from unauthorized access.

While we strive to protect your personal information, no internet transmission is completely secure. We encourage users to protect their account credentials and report any suspected security incidents immediately.

International Data Transfers

Your personal data is primarily processed and stored within Thailand. When we use international service providers for specific functions like email delivery or cloud backups, we ensure adequate protection through appropriate safeguards and contractual commitments.

Any international transfers comply with Thai PDPA requirements and include provisions for data subject rights, security standards, and breach notification procedures. We regularly review these arrangements to ensure continued protection of your personal information.

Policy Updates and Notifications

This privacy policy was last updated in February 2025. We review and update our privacy practices regularly to reflect changes in our services, applicable laws, and industry best practices.

When significant changes are made to this policy, we will notify registered users via email and display prominent notices on our platform. Continued use of our services after notification constitutes acceptance of the updated privacy policy.

We maintain archives of previous policy versions for transparency and compliance purposes. You can request copies of earlier versions by contacting our privacy team.