Privacy Policy — lawizomo

Definitions

To keep this policy clear, we define key terms used throughout. These definitions help explain what we mean by personal data, processing activities, who qualifies as a user, and what services we operate at lawizomo.

Personal data means any information that can identify a person directly or indirectly. This includes names, contact details, ID numbers, payment information, job titles, and any content you submit as part of course registration or communication with lawizomo.

Processing covers any operation performed on personal data, such as collection, storage, structuring, adaptation, disclosure, transmission, erasure and archiving. Processing occurs when you register for a course, contact support, or use our online learning tools.

User refers to anyone who interacts with lawizomo, including prospective learners, registered students, corporate training contacts, administrators and visitors to lawizomo.info who access course information or contact forms.

Service means the educational services and related functionality offered by lawizomo, including online courses, in-person workshops in Thailand, course materials, assessments, certificates, billing and customer support.

Cookies are small text files placed on your device to store preferences and track usage. We use cookies to remember login sessions, measure site performance and personalize content related to our IT security and digital literacy offerings.

Data Collection

We collect only the data necessary to provide and improve our educational services, manage accounts and communicate about courses and billing. Collection is limited to what supports course delivery, customer service and legal obligations.

Data You Provide

When you register, purchase a course, request support or submit assessments, you give us information to process your enrollment and deliver the service. We ask for the minimum required fields to complete these tasks.

Full name and preferred display name for registration and certificates
Email address and phone number for account access, course updates and support communications
Billing information and payment method details necessary to process purchases (we do not store full card numbers on our servers)
Professional details such as employer, job title and sector when relevant for corporate training or certificate issuance
Profile and coursework content including assessments, submitted projects and feedback to evaluate progress
Communications you send to us such as messages, support requests and consent preferences

Automatically Collected Data

When you use our website and platforms, we collect technical and usage data to keep services secure, reliable and tailored to learners. This helps detect issues and improve course delivery.

IP address and approximate location for security and fraud detection
Device and browser information to optimize compatibility and display of course materials
Usage data such as pages visited, time spent on lessons and interaction patterns for service improvement
Cookies and local storage identifiers to manage login sessions and preferences
Performance and error logs to troubleshoot technical problems
Analytics identifiers from third-party analytics tools to help measure and improve engagement

Third-Party Data

We may receive data about you from trusted third parties to streamline processes such as payments, identity verification and analytics. We limit sharing and choose providers that follow strong data protection practices.

Payment processors for transaction confirmation and fraud prevention
Cloud hosting and platform providers that store course content and backups
Analytics and performance services that provide aggregated statistics to improve our offerings

Purposes of Processing

We use personal data to operate and improve lawizomo courses and related services. Below are the core purposes for data processing, each tied to delivering practical, secure learning experiences.

To register learners, manage course enrollment and deliver course materials
To process payments, invoices and refunds with trusted payment partners
To provide learner support, respond to inquiries and resolve issues
To personalize course recommendations and adapt content to learner progress
To operate and secure our website, detect abuse, and prevent unauthorized access
To evaluate and improve course quality through aggregated analytics and learner feedback
To meet legal, tax and accounting obligations in Thailand or other applicable jurisdictions
To communicate important updates about schedules, policy changes and continuing education opportunities

Legal Basis for Processing

We rely on appropriate legal bases to process personal data. The specific basis depends on the processing purpose and the data involved.

Performance of a contract: to fulfill course enrollment, delivery and related services you request
Consent: for optional marketing communications and certain analytics processing where consent is required
Legal obligation: to comply with tax, accounting and regulatory requirements in Thailand
Legitimate interests: to maintain platform security, prevent fraud, and improve course quality in ways that do not override your rights

Cookies and Similar Technologies

Cookies and similar tools help lawizomo remember preferences, secure accounts and analyze how learners use our courses. You can manage cookie choices through your browser or our cookie settings interface.

We use session cookies (temporary, removed when you close your browser), persistent cookies (to remember preferences), and first-party and third-party cookies for functionality and analytics.

Categories include strictly necessary cookies for core functionality, performance cookies for analytics, and preference cookies for personalization. Marketing cookies are used only with consent.

You can manage cookies via your browser settings or decline non-essential cookies on our site. Opting out of analytics cookies may reduce personalized recommendations and aggregated usage insights.

Cookie Policy

Data Sharing

We share personal data only when necessary to deliver services, comply with law, or with your consent. Shared data is limited to what is required and protected by contractual safeguards.

Service providers who process payments, host course content, or provide analytics on our behalf
Corporate training partners who require participant lists and completion records for enrolled employees
Legal and regulatory authorities when required by law or to respond to lawful requests
Business advisors and auditors who handle confidential information under non-disclosure agreements
Third parties when you give explicit consent to share specific information
Acquirers or partners in the event of corporate restructuring, with appropriate protections for personal data

International Data Transfers

Because lawizomo uses cloud services and international partners, your data may be transferred to or processed in other countries. We take steps to ensure your data remains protected according to applicable law.

Safeguards include standard contractual clauses, data processing agreements with providers, encryption in transit and at rest, and selecting vendors with strong security practices.

Data Retention

We retain personal data only as long as necessary for the purposes described, to fulfill legal obligations and to protect our legitimate interests in a proportionate way.

Account information is retained for the duration of your active account and for a limited period afterwards to allow reactivation and to meet tax and billing requirements.

Messages and support communications are kept for as long as needed to resolve inquiries and to document interactions for quality and compliance purposes.

System logs, access records and security-related logs are kept for a limited time to contribute incidents, detect abuse and comply with legal obligations.

When retention periods expire or you request deletion, we securely remove or anonymize personal data unless retention is required by law. Deletion requests follow verification procedures to prevent unauthorized changes.

Security of Your Data

Protecting your data is a core responsibility. We implement technical and organizational measures to reduce the risk of unauthorized access, disclosure, alteration and destruction. Security efforts are reviewed regularly and scaled with service needs.

Encryption in transit (TLS) and at rest for sensitive information
Strict access controls, role-based permissions and periodic access reviews
Regular backups, vulnerability scanning and staff security training

Your Rights

Depending on your jurisdiction and local law, you may have rights regarding your personal data. We aim to make exercising these rights straightforward while protecting privacy and security.

Right to access: request a copy of personal data we hold about you
Right to rectification: ask us to correct inaccurate or incomplete data
Right to erasure: request deletion of personal data when processing is no longer necessary
Right to restrict or object: request limits on processing or object to certain uses such as direct marketing
Right to data portability: receive a machine-readable copy of personal data provided by you
Right to withdraw consent where processing is based on consent; withdrawal will not affect processing already completed
Right to withdraw consent at any time for processing activities based solely on consent, without affecting processing conducted prior to withdrawal.
Right to refuse or object to direct marketing or processing for profiling related to direct marketing, subject to applicable law.

GDPR and International Data Rights

lawizomo respects the privacy rights of individuals worldwide. If you are located in the European Economic Area or another jurisdiction with similar rights, you may have additional legal protections under data protection laws such as the General Data Protection Regulation (GDPR). This section explains which GDPR-style rights apply and how you can exercise them when interacting with lawizomo courses and services.

These GDPR-style rights apply when lawizomo processes personal data of individuals covered by those laws. Applicability depends on the nature of the processing and your location. If you are entitled to these rights, you can request access, rectification, erasure, restriction, portability, or objection as described below. Requests are reviewed in accordance with applicable legal requirements and our verification procedures.

Right of access: request a copy of personal data processed by lawizomo and details about the purposes and categories of processing.
Right to rectification: request correction of inaccurate or incomplete personal data we hold about you.
Right to erasure (right to be forgotten): request deletion of personal data where legal grounds for continued processing do not exist.
Right to data portability: receive personal data you provided in a structured, commonly used format, where processing is based on consent or contract and carried out by automated means.

If you believe lawizomo has not handled your personal data in accordance with applicable law, you may contact us first using the contact details below. You also have the option to lodge a complaint with a competent supervisory authority in your jurisdiction. We will cooperate with relevant authorities as required by law.

How to Request Your Privacy Rights

To submit a request to access, correct, delete, or port your data, contact our privacy team with a clear description of the request and proof of identity. Include your full name, email used with lawizomo, and a brief description of the data or service involved. We will verify identity before processing requests to protect personal data from unauthorized disclosure.

[email protected]

Responses to valid requests are typically provided within 30 days of receipt. For complex requests or large volumes of data, we may need additional time and will inform you if an extension is necessary, explaining the reasons for the delay.

Marketing Communications

lawizomo may send promotional messages about new courses, special pricing, and events when you opt in. Marketing communications are designed to help you discover relevant cybersecurity and IT literacy courses that can strengthen skills and workplace readiness. You will only receive such messages if you have consented or if permitted under applicable law.

You can unsubscribe from marketing messages at any time using the unsubscribe link in emails, by updating your preferences in your account, or by contacting our support team. Unsubscribing does not affect transactional or operational messages necessary for course delivery.

Children's Privacy

lawizomo is intended for adult learners and professional development. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without verified parental consent, we will take steps to delete that information as required by applicable law.

Third-Party Links and Services

Our website and course platform may contain links to third-party sites, tools, or services that we do not control. These external providers have their own privacy policies and practices. lawizomo is not responsible for the privacy practices of third parties, and we encourage you to review their policies before sharing personal information.

Changes to this Privacy Notice

We may update this privacy notice to reflect changes in our operations, legal requirements, or service offerings. Material changes will be communicated by posting a revised notice on the website with an updated effective date. Continued use of our services after a policy update indicates acceptance of the revised terms.