Privacy Policy Overview

Definitions

The following terms are used throughout this policy and have the meanings set out below.

Purposes of Data Processing

We process personal data for specific objectives aligned with our mission to support entrepreneurs.

• Facilitate user registration and account management
• Deliver workshops, webinars, and learning materials
• Communicate updates, promotions, and essential notices
• Personalize content and recommend relevant resources
• Analyze platform usage to improve features
• Ensure security and prevent unauthorized access
• Comply with legal obligations and internal policies
• Process payments and manage billing operations

Legal Basis for Processing

We rely on several lawful grounds to ensure compliance with data protection standards.

• Performance of a contract to fulfill service agreements
• Legitimate interests such as platform optimization and security
• Consent where explicitly requested for communications
• Legal compliance with regulations and audits

Cookie Policy

We use cookies and similar technologies to enhance user experience and understand platform usage.

Types include session cookies, persistent cookies, and third-party analytics cookies.

Categories: essential, performance, functionality, and marketing cookies.

You can manage cookie preferences through your browser settings or cookie banner options.

Learn more about our cookie practices in the Cookie Policy.

Data Sharing

We may share personal data with selected entities to support service delivery and compliance.

• Service providers assisting with platform operations
• Payment processors to facilitate transactions
• Analytics partners for performance insights
• Legal authorities when required by law
• Affiliated companies within our corporate group
• Marketing partners with user consent

International Data Transfers

Your data may be transferred to and stored in servers outside of Thailand for operational efficiency.

We implement standard contractual clauses and encryption to protect data during cross-border transfers.

Data Retention

We retain personal data only as long as necessary for specified purposes and to meet legal requirements.

Account information is kept active until you request deletion.

Communication records are stored for up to five years for service improvement.

System logs are retained for security monitoring for up to one year.

Upon expiry of retention periods, data is securely deleted or anonymized.

Exercising Your Rights

To exercise any of the rights listed above or for questions about your data, please contact us.

• Submit a request to access, correct, or delete your personal data
• Opt out of marketing communications at any time
• Raise concerns about data processing to our privacy team
• You have the right to request restriction of processing your personal information when accuracy is contested, processing is unlawful, or consent has been withdrawn.
• You have the right to object to processing of your personal data for direct marketing purposes or processing based on legitimate interests, where applicable.
• You have the right to data portability, allowing you to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
• You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable data protection laws.

Exercising Your Data Rights

To exercise any of your privacy rights listed above, please submit a request via our contact form at auroraefy.click or send a detailed email to [email protected]. Include your full name, business ID (if applicable), and a description of the request to help us process it efficiently.

[email protected]

We aim to respond to all data rights requests within 30 days of receipt and may require additional verification to safeguard your information.