Privacy Policy

The following definitions are used to explain terms in this policy. They are intended to clarify how we use the terms 'personal data', 'processing', 'user', 'service' and 'cookies' in the context of Luminara's activities.

We collect only the categories of personal data necessary to provide our services, communicate about training and fulfill legal and administrative obligations. Collection methods include information you provide directly, automated collection via the website, and data shared by third-party partners when applicable.

When you interact with Luminara, you may provide the following types of information necessary to register, receive materials, and participate in training activities:

• Identification and contact details: full name, business name, job title, professional email address and telephone number.
• Registration and billing information: company name, invoicing address, payment details provided to our payment processor, and purchase history related to courses and training sessions.
• Professional background: organization, role, sector, areas of responsibility and optional professional biography relevant to training participation.
• Communications: inquiries, feedback, support requests, email correspondence and records of consent preferences.
• Training materials and assessment data: submitted exercises, workshop attendance records, certificates of completion and aggregated assessment results used for program administration.
• Optional demographic information: information you choose to provide for reporting purposes, such as country of residence or language preference.

When you use our website and online services, we and our service providers may automatically collect technical and usage information to operate and improve our offerings and to protect the service.

• Device and browser information such as IP address, device type, operating system, browser version and language settings.
• Usage data including pages visited, time spent on pages, clicks, navigation paths, and interaction with training content and resources.
• Cookies and similar identifiers used for session management, preference storage and analytics as described elsewhere in this policy.
• Performance and diagnostic data such as error reports, logs and metrics used to maintain service availability and fix technical issues.
• Location data derived from IP addresses when necessary for regional compliance and to provide localized content.
• Aggregated and anonymized data created from the above, used for statistical analysis and program evaluation.

We may receive personal data about you from third parties in limited circumstances, subject to applicable law and contractual safeguards. Examples are provided below.

• Payment processors and business institutions that provide transaction confirmations and payment metadata necessary to complete purchases.
• Professional networks or third-party event platforms when you register for an event through those services and you have permitted them to share your details with Luminara.
• Analytics and hosting providers that supply aggregated usage statistics, logs and performance data used to run and improve the website.

We process personal data for specific, explicit and legitimate purposes necessary to deliver our services, manage relationships and comply with legal obligations. These purposes are listed below.

• To register participants for workshops and training, administer course logistics and deliver training materials.
• To process payments, issue invoices and manage refunds or billing inquiries in relation to training services.
• To communicate about course schedules, updates, confirmations and follow-up information essential to program participation.
• To provide technical support, respond to enquiries and maintain accurate records of interactions with participants.
• To analyze and improve training content, website functionality and user experience using aggregated and pseudonymized data where practicable.
• To comply with legal obligations, internal policies and professional recordkeeping requirements applicable to our operations in Malaysia and other jurisdictions.
• To ensure security, detect and prevent fraud, and protect the rights, property and safety of participants and Luminara systems.
• To send marketing communications where you have provided consent or where such communications are otherwise permitted; marketing preferences can be managed or withdrawn as described below.

Where applicable law requires us to identify the legal basis for processing personal data, we rely on the following bases depending on the processing activity and the jurisdiction of the data subject.

• Performance of a contract or to take steps at a prospective participant's request prior to entering into a contract (e.g., registration and delivery of training services).
• Consent for optional processing such as marketing communications and certain analytics where consent is required by law; you may withdraw consent at any time.
• Legal obligations where processing is necessary to comply with statutory or regulatory requirements, tax or accounting obligations.
• Legitimate interests pursued by Luminara such as fraud prevention, network and information security, and improvement of our services, balanced against individual rights and freedoms.

Cookies and similar technologies are used on huzina.digital to make the website function correctly, remember preferences and collect analytics data. These technologies are described below along with options for managing them.

We use session cookies, persistent cookies, and secure cookies set by the site or by trusted third-party services for analytics and functionality. Cookies may be strictly necessary, performance-related, functional, or advertising/analytics related.

Categories include: Strictly Necessary (essential for site operation), Preferences (store user settings), Analytics (usage tracking), and Advertising/Targeting (used by third parties for relevant content).

You can control cookies via your browser settings to block or delete cookies. Opt-out mechanisms are available for some third-party analytics providers. Disabling certain cookies may affect site functionality and access to training resources.

Detailed cookie information is available at https://huzina.digital/cookie-policy

Luminara may share personal data with external parties when necessary for the purposes described above, subject to confidentiality and contractual safeguards. Sharing is limited to what is necessary for the specified purpose.

• Service providers and subcontractors who perform services on our behalf such as payment processing, hosting, analytics, email delivery and customer support.
• Affiliated entities or partners involved in delivering joint training programs or co-branded events, under data processing agreements that restrict further use.
• Legal authorities, regulators or other bodies when required by law, court order or to respond to lawful requests for disclosure.
• Professional advisors such as auditors, lawyers and accountants who require access to personal data to provide services to Luminara and who are bound by confidentiality obligations.
• Potential buyers, supporter or advisers in connection with a business transfer, merger or reorganization, where only necessary data is shared and confidentiality protections are applied.
• With your explicit consent where you have authorized a third party to receive your personal data.

Personal data may be transferred to jurisdictions outside Malaysia for processing by service providers or partners. When such transfers occur, we apply appropriate safeguards to protect personal data and comply with applicable data protection requirements.

Safeguards may include contractual data processing agreements, standard contractual clauses approved by relevant authorities, verification of the recipient's security practices, and other legally recognized transfer mechanisms appropriate to the destination jurisdiction.

We retain personal data only for as long as necessary to fulfill the purposes set out in this policy, comply with legal obligations, resolve disputes and enforce agreements. Retention periods vary by data category and purpose.

Account and registration data will generally be retained for the duration of the participant relationship and for a reasonable period thereafter to meet administrative, tax and legal recordkeeping requirements.

Communications and support messages are retained for a period necessary to manage enquiries, improve services and maintain a history of interactions; retention periods are defined by operational needs and legal obligations.

System logs and security-related records are retained according to operational and compliance needs to support incident response, forensic analysis and regulatory requirements.

When personal data is no longer required, it will be deleted or anonymized in a manner consistent with security best practices. Requests for deletion are subject to applicable legal exceptions and the need to preserve data for legitimate business or legal purposes.

Luminara employs a combination of technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration or destruction. Measures are regularly reviewed and updated in response to evolving risks.

• Encryption of data in transit using TLS and encryption at rest where appropriate to protect sensitive information.
• Access controls, role-based permissions and administrative safeguards to limit access to personal data to authorized personnel only.
• Regular security assessments, patch management, logging and monitoring to detect and respond to security incidents in a timely manner.

Subject to applicable law, individuals have certain rights regarding their personal data. Requests will be handled in accordance with applicable legal requirements and Luminara procedures.

• Right of access: you may request confirmation of whether we process your personal data and request a copy of that data.
• Right to rectification: you can request correction of inaccurate or incomplete personal data.
• Right to erasure: in certain circumstances you may request deletion of your personal data, subject to legal exceptions and retention obligations.
• Right to restriction of processing: you can request limitation of processing under certain conditions.
• Right to data portability: where applicable, you may request a machine-readable copy of personal data provided to us for transmission to another controller.
• Right to object: where processing is based on legitimate interests or for direct marketing, you may object to processing in certain circumstances.
• Right to withdraw consent: where processing relies on consent, you can withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint with a supervisory authority if you consider your rights have been infringed; contact information for relevant authorities is available upon request.

For individuals subject to EU data protection rules, Luminara provides additional information about rights, legal bases and mechanisms for international transfers. Where EU data protection law applies, we will act in accordance with those requirements and facilitate exercise of EU data subject rights upon request.

Luminara operates from Malaysia and complies with applicable Malaysian data protection requirements. The EU General Data Protection Regulation (GDPR) may apply to personal data processed by Luminara only where the data subject is an EU resident and the processing falls within the scope of that regulation. In such cases Luminara will apply appropriate safeguards and respond to data subject requests in line with legal obligations.

• Processing for provision of training services and related communications.
• Storage of contact and transactional records for administrative and legal purposes.
• Use of aggregated, anonymised information for internal reporting and service improvement.
• Limited sharing with service providers under data processing agreements where necessary for service delivery.

If you believe Luminara has processed your personal data in violation of applicable law, you may contact our data protection representative using the contact details below. If you are located in the European Economic Area and consider your rights under GDPR affected, you may also lodge a complaint with a supervisory authority in your member state.

Individuals may request access to their personal data, rectification of inaccuracies, deletion of data where applicable, restriction of processing, or portability of data when technically feasible. Requests should be submitted in writing and include sufficient information to identify the requester and the data concerned.

[email protected]

We aim to acknowledge receipt of a personal data request within 7 calendar days and to provide a substantive response within 30 calendar days where feasible. In complex cases or where supplementary information is required, the response period may be extended and the requester will be informed.

Luminara may contact you with information about training programs, events, and related resources where you have consented or there is a legitimate interest. Marketing communications include email newsletters, event invitations, and service updates. Marketing recipients can manage preferences at any time.

To stop receiving marketing communications, follow the unsubscribe link provided in any marketing email or send a request to [email protected]. We will process unsubscribe requests promptly and respect your updated preferences.

Our services are designed for professionals and company directors. We do not knowingly collect personal data from children under the age of 18. If we become aware that we have inadvertently collected data relating to a minor, we will take reasonable steps to remove that information.

Our website may contain links to third-party sites and resources. Luminara is not responsible for the privacy practices or content of external sites. Users are encouraged to review the privacy policies of any third-party services they visit.

Luminara may update this privacy information to reflect changes in legal requirements or business practices. Material changes will be posted on the website with an updated effective date. Continued use of our services after changes are posted constitutes acceptance of the revised terms.