Privacy Policy
At neolenora, we are committed to safeguarding your personal information with the utmost care. This Privacy Policy outlines the types of data we collect, the purposes for which we use it, and the measures we take to ensure its security. We adhere to industry best practices and comply with applicable regulations to maintain your trust and support your leadership growth journey.
Definitions
The following definitions apply throughout this Privacy Policy to clarify the meaning of terms related to personal data and processing activities.
- Any information relating to an identified or identifiable natural person, such as name, email address, or usage data.
- Any operation or set of operations performed on personal data, including collection, storage, use, disclosure, and deletion.
- An individual who accesses or uses neolenora services or materials for leadership development.
- The online platform, courses, coaching sessions, and related resources offered by neolenora.
- Small text files placed on a user’s device by a website to store preferences and track usage.
Data Collection
We collect data directly from users, automatically through technology, and from third-party sources to provide and improve our services.
Data You Provide
When you register, enroll in a course, or contact support, you may provide the following types of information:
- Full name and professional title
- Email address and telephone number
- Organization and role details
- Payment and billing information
- Feedback, survey responses, and course submissions
- Preferences and communication settings
Automatically Collected Data
When you interact with our platform, we automatically collect:
- IP address and device identifiers
- Browser type, operating system, and session duration
- Cookie data and tracking pixels
- Usage metrics and feature interactions
- Referring URLs and navigation paths
- Geolocation derived from IP address
Third-Party Sources
We may obtain information about you from:
- Payment processors for transaction verification
- Analytics providers for aggregate usage reports
- Professional networking platforms when you authorize integration
Purposes of Processing
We use personal data to achieve the following objectives:
- Create and manage your account
- Deliver courses, coaching, and resources
- Process payments and invoices
- Communicate updates, support inquiries, and announcements
- Personalize content and learning pathways
- Analyze platform performance and user engagement
- Ensure security and detect unauthorized activity
- Comply with legal and regulatory obligations
Legal Basis for Processing
We rely on the following legal grounds to process personal data:
- Contract performance to deliver agreed services
- User consent for optional communications and marketing
- Legitimate interests in enhancing platform functionality
- Compliance with legal obligations and industry standards
GDPR Rights
If you are located in the EU, you have specific rights under the GDPR regarding your personal data:
- Right to access your personal data
- Right to request correction of inaccurate information
- Right to erasure of personal data
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent at any time
Cookies and Tracking
Our website uses cookies and similar technologies to enhance user experience and analyze traffic.
Cookies may be session-based or persistent and can include first- and third-party cookies.
We use necessary, preferences, analytics, and marketing cookies.
You can manage cookie preferences through your browser settings or the cookie banner available on our site.
Learn More in Our Cookie Policy
Data Sharing
We may share personal data with the following categories of recipients:
- Service providers who support our platform operations
- Affiliated companies and trusted partners
- Legal authorities when required by law
- Potential acquirers in business transfers
- Marketing and analytics platforms with user consent
- Third-party integration services you authorize
International Transfers
Your personal data may be transferred to and maintained on servers located outside your jurisdiction for processing needs.
We implement Standard Contractual Clauses and other approved mechanisms to safeguard your information.
Data Retention
We retain personal data only as long as necessary for the purposes outlined or as required by law.
Account data is stored until you delete your account and for two years thereafter for record-keeping.
Support messages and inquiries are kept for five years to address any follow-up needs.
System logs and usage records are retained for up to 12 months for security audits.
Upon deletion requests, we securely archive then permanently erase personal data in accordance with policies.
Security Measures
We apply industry-standard technical and organizational measures to protect your data against unauthorized access or disclosure.
- Data encryption in transit and at rest
- Role-based access controls and multi-factor authentication
- Regular security training and vulnerability assessments
User Rights
You have the following rights with respect to your personal data, which you can exercise by contacting us:
- Access and obtain a copy of your data
- Rectify any inaccurate or incomplete information
- Request erasure, restriction of processing, or object to processing
- Right to restriction of processing: You may request to limit how your personal information is processed under certain conditions, such as disputed data accuracy or unlawful processing.
- Right to data portability: You have the option to receive your personal data in a structured, commonly used machine-readable format, and transfer it to another service provider.
- Right to withdraw consent: Where processing is based on your consent, you may revoke your consent at any time, without affecting the lawfulness of processing before the withdrawal.
- Right to object to processing: You may object to the processing of your personal data for direct marketing or other grounds specified by applicable data protection laws.
- Right to lodge a complaint: If you believe your data protection rights have been violated, you may file a complaint with the relevant supervisory authority in Thailand.
Exercising Your Privacy Rights
To exercise any of your rights, please submit a written request to our Data Protection Officer at the contact details below. Include your full name, email address, and a clear description of your request. We will verify your identity before taking any action.
We aim to respond to all valid requests within 30 days of receipt. If we require additional time due to complexity or number of requests, we will inform you within the original 30-day period.
Marketing Communications
With your consent, neolenora may send you newsletters, updates, and promotional content related to leadership development services. You can choose your communication preferences at any time.
To unsubscribe from marketing communications, click the 'unsubscribe' link in any email or send your request to [email protected].
Children’s Privacy
Our services are not directed to individuals under 16 years old. We do not knowingly collect personal information from children under 16. If you believe we have unintentionally collected such data, please contact us to have it removed.
Third-Party Links
Our website may include links to external sites not operated by neolenora. We are not responsible for the content or practices of these third-party sites and encourage you to review their privacy policies.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal obligations. When we make significant updates, we will post the revised policy with a new effective date at the top of this page.