How we handle data

Key definitions

This section explains common terms used throughout the policy, with examples relevant to smart home and AI-assisted devices sold by luximaos. Clear definitions help you understand what data we refer to in scenarios such as device setup, remote diagnostics, and subscription services.

What data we collect

We collect data that is strictly necessary to deliver product features, provide support, and improve device reliability. Below are examples tied to real scenarios: initial device registration, periodic firmware diagnostics, and service appointment scheduling.

Data you provide directly

When you interact with luximaos — for purchases, account setup, or support — you provide specific information. These items are used to complete transactions, deliver products to you in Thailand, and manage service cases.

• Contact details: name, email address, and phone number supplied when creating an account or scheduling installation; used to coordinate deliveries to 106, Amphoe Pa Sang District, Lamphun Province 51120, Thailand.
• Shipping and billing information: postal address and payment billing details needed to fulfill orders and process returns for smart devices such as vacuums and conditioners.
• Device registration details: model, serial number, purchase date (e.g., 28-02-2026), and purchase channel, used to verify warranty and eligibility for support.
• Support communications: chat transcripts, emails, and recorded support calls where you describe device behavior or request repair, kept to resolve incidents and track recurring issues.
• Preferences and consent choices: language, marketing opt-ins, and notification preferences set in your account or during checkout at luximaos.club.
• Optional profiling information: user feedback, ratings of device performance, and voluntary survey responses that help us refine device features and service scenarios.

Data collected automatically

Some data is gathered automatically to enable device functions and improve reliability. Examples include periodic diagnostic telemetry from a smart water dispenser to detect clogging or sensor drift and website analytics to improve user flows.

• Device telemetry: anonymized performance metrics, error codes, uptime, and sensor readings sent from devices to support diagnosis and firmware optimization.
• Usage patterns: feature usage logs (e.g., how often an auto-feeder dispenses food) used to identify common scenarios and prioritize firmware updates.
• Connection and network metadata: device IP ranges, connectivity logs, and signal strength collected to troubleshoot remote access issues.
• Website analytics: page visits, click paths, and session duration to improve the luximaos.club shopping and support experience.
• Diagnostic attachments: anonymized crash reports and system snapshots submitted during fault reports to speed up troubleshooting.
• Device location metadata: coarse location data derived from IP or user-provided address to route repairs and localized settings; exact GPS is collected only if you enable a location-based feature.

Data received from third parties

We may receive certain information from partners, marketplaces, or payment processors to complete orders or provide integrated services. Below are examples showing how third-party data is used in practical cases.

• Payment processor confirmations: payment transaction IDs and billing verification to reconcile purchases and manage refunds.
• Delivery partner updates: shipment tracking and delivery confirmations from logistics partners that help us coordinate installation appointments.
• Service partner reports: authenticated diagnostic results when field technicians from authorized partners perform in-home repairs under manufacturer instructions.

Why we process your data (purposes)

We only use data to fulfill contractual duties, support device operation, improve product experience, and comply with legal obligations. Practical cases included demonstrate how each purpose maps to everyday scenarios.

• Order fulfillment and delivery: use contact and address data to ship products and arrange installation visits (example: scheduling AC installation in Lamphun).
• Device operation and support: process telemetry to diagnose faults and provide remote or on-site service, as when a robot vacuum reports a persistent brush jam code.
• Security and fraud prevention: analyze patterns to detect unauthorized access attempts to device accounts and protect other users.
• Product improvement: aggregate anonymized usage data to prioritize firmware updates and hardware revisions based on common real-world scenarios.
• Customer communications: send account notices, appointment reminders, and transactional messages related to purchases and service activities.
• Marketing and offers: deliver promotions and tailored recommendations when you have opted in, using purchase history to suggest compatible accessories.
• Legal compliance: retain and disclose records to meet legal, regulatory, and tax obligations in Thailand (e.g., Business ID handling).
• Research and analytics: perform aggregated analysis to understand device reliability across environments and to create better support guides.

Legal basis for processing

We rely on lawful bases such as contract performance, legitimate interests, legal obligations, and consent. Each basis is applied only where appropriate and explained with examples below.

• Contract performance: processing order and warranty information to fulfill sales agreements and support commitments for devices you purchase.
• Legitimate interests: improving device reliability and preventing fraud, balanced against your privacy in routine diagnostics and anonymized analytics.
• Consent: when you actively opt in to marketing communications or optional features that require additional data, such as location-based scheduling.
• Legal obligation: processing necessary for tax reporting, compliance with Thai regulations, and responding to lawful requests from authorities.

Cookies and similar technologies

We use cookies to deliver a functional shopping and support experience on luximaos.club. Below we describe types, purposes, and how they apply in practical user flows.

Types include essential cookies for login and cart, preference cookies for language and region, analytics cookies for site improvements, and advertising cookies when you opt in to personalized promotions.

Categories: essential (session and authentication), performance (site analytics), functional (preferences), and advertising (opt-in personalized offers). Essential cookies are required for core service features.

Manage cookies from your browser settings or via the cookie banner on luximaos.club. Blocking cookies may affect functionality such as saved device settings or checkout convenience.

Full cookie policy and management

When we share data

We share data only as necessary for service delivery, legal reasons, or when you instruct us to do so. The examples below reflect real sharing scenarios like repairs, warranty claims, and logistics.

• Service partners: authorized technicians and repair centers receive device and contact details to perform in-home repairs under a service order.
• Logistics providers: shipping companies receive delivery addresses and contact numbers to deliver smart devices to your specified Thai address.
• Payment providers: payment processors receive billing details and transaction data to execute payments securely.
• Legal and regulatory requests: disclosure to authorities when required by law, with case-by-case assessment and minimization of shared data.
• Analytics vendors: aggregated and pseudonymized usage data may be shared with analytics providers to analyze product performance without identifying individual users.
• Business transfers: in the event of a sale or reorganization, personal data necessary for ongoing service and support may be transferred as part of the transaction, with appropriate safeguards.

International transfers of data

Some processing may occur outside Thailand, for example when cloud services host device telemetry in border regions to reduce latency. We apply safeguards such as contractual protections and data minimization to maintain reasonable protections.

Safeguards include standard contractual clauses, vendor assessments, and limiting the categories of data transferred. Transfers are evaluated against the actual need, such as firmware distribution or cross-border technical support.

Data retention

We retain personal data only as long as necessary for the purposes described, for practical support cases, legal obligations, and to honor legitimate business needs. Retention is guided by scenarios like warranty periods and support history.

Account data: retained while your account is active and for up to statutory periods afterwards to meet legal and tax requirements or until you request deletion.

Support communications: retained for the lifecycle of the support case plus a period for quality review, typically aligned with warranty timelines.

System logs and telemetry: stored for a limited period to analyze device reliability and incidents; retention periods vary by data type and are periodically reviewed.

Deletion requests are processed in accordance with applicable law and subject to necessary exceptions such as fraud prevention and legal holds. We provide practical guidance on what deletion means for device functionality.

Security of your data

We implement industry-standard security measures to protect data against unauthorized access and to reduce risks in real-world cases, such as securing firmware update channels and encrypting stored telemetry.

• Technical controls: encryption in transit and at rest for sensitive data and secure authentication for account access.
• Organizational measures: role-based access controls and staff training focused on device support scenarios and data minimization.
• Operational practices: regular vendor audits, vulnerability testing of device software, and incident response procedures to address detected issues.

Your privacy rights

Depending on your jurisdiction and local law, you have rights related to your personal data. Below are examples framed as practical cases, such as updating contact info after moving or requesting copies of device telemetry for a support dispute.

• Access: request a copy of personal data we hold about you, including account profile and recent support logs related to a specific device.
• Rectification: correct inaccurate contact details or device registration information to ensure proper delivery and support.
• Erasure: request deletion of personal data where applicable, noting that some data may be retained for legal or contractual reasons like warranty records.
• Restriction: ask us to limit processing while a dispute about accuracy or lawfulness is being resolved.
• Data portability: request a structured copy of data you provided, for example device registration and preferences, in a commonly used format.
• Object to processing: object to certain processing such as direct marketing; we will stop marketing processing upon objection.
• Withdraw consent: if you previously consented to marketing or optional features, you may withdraw that consent without affecting other services.
• Complaint: you may lodge a complaint with a supervisory authority if you consider our processing does not comply with applicable rules.

GDPR and related rights

Although luximaos operates primarily in Thailand, we recognize international privacy frameworks. Where applicable, we respect rights similar to those under GDPR and will cooperate with valid cross-border requests, providing clear procedures to exercise your rights.

The GDPR may apply to individuals in the European Union or European Economic Area who interact with luximaos services from those locations. Practical cases: if an EU resident places an order for a smart vacuum or requests device telemetry export, GDPR rights may be engaged; if a business in the EU requests processing records for multiple devices used in offices, different obligations can arise. If you believe GDPR applies to you, contact our data team with a clear description of the processing scenario and the devices involved so we can assess jurisdiction and next steps.

• Access: request a copy of personal data related to orders, warranties and device registrations (example: request device registration logs for a smart feeder purchased in Berlin).
• Rectification: ask to correct inaccurate information, such as a shipping address for an air conditioner installation appointment in Bangkok.
• Erasure and restriction: request deletion or restriction when you no longer use a cloud service tied to a pet waterer; we will review whether legal exceptions apply.
• Portability and objection: request transfer of certain data to another provider (for example, moving device settings and schedules to a new cloud) or object to specific automated profiling used for marketing.

If you remain unsatisfied after contacting luximaos about a GDPR-related concern, you may file a complaint with the supervisory authority in your country. Example scenario: if a customer in Madrid believes their request to delete device telemetry was not handled, they can contact the relevant EU regulator after notifying our team and allowing time for response.

How to exercise your privacy rights

To exercise rights such as access, correction or erasure, send a request to [email protected] with a clear description, device serial number (if relevant) and a copy of an ID when necessary. Example case: to update ownership information after gifting a smart air purifier, provide the original order number and both parties' names so we can validate and apply the change. We follow verification steps to protect your data and may ask for additional information in specific scenarios.

[email protected]

We aim to acknowledge requests within 5 business days and to complete straightforward requests within 30 days. Complex requests that require coordination with third-party processors or multi-device data collection may take up to 60 days; in such cases we will communicate the reason and a likely timeline.

Marketing communications and personalization

We use basic preference data and past purchase examples to tailor communications: e.g., firmware update notices for robot vacuums, seasonal cooling offers for air conditioners, or refill reminders for smart pet feeders. Marketing segmentation is based on explicit consent where required; examples include email promotions for users who opted into device maintenance newsletters. You can manage preferences in your account or via the unsubscribe link.

To stop marketing emails, click the unsubscribe link at the bottom of any promotional message or update preferences in your luximaos account. If you prefer, send a request to [email protected] and include the type of messages you no longer want to receive (promotions, product announcements, firmware tips). Transactional emails related to orders and safety notices cannot be unsubscribed from.

Children's privacy

luximaos services are intended for adults and households. We do not knowingly collect personal data from children under 13 without parental consent. Example: if a parent creates an account to manage a connected pet feeder used in a family home, the parent should register and control the account; minors should not create independent accounts. If you believe we have received data about a child without parental consent, contact [email protected] with details and we will take steps to review and remedy the situation.

Third-party links and services

Our site and product apps may link to or integrate with third-party services such as payment processors, cloud storage providers and shipping partners. Example integrations: payment processing for purchases, cloud firmware hosting for air conditioners, or analytics for product performance. These services have their own privacy policies. When you authorize an integration (for example, linking a smart feeder to a third-party voice assistant), review the external provider's terms and privacy practices.

Policy updates

We periodically update this privacy policy to reflect new services, legal requirements or operational changes. Example: a change to how device telemetry is retained after a firmware feature launch will be posted here with the effective date. Material changes that affect your rights will be communicated via email to registered accounts or by prominent notice on luximaos.site.