Overview of Data Practices
Lumvani operates professional upskilling and career advancement services from Shenton Lane, Singapore. This policy explains the categories of personal data we process, the lawful bases for processing, the purposes for which data is used, and the measures we maintain to protect personal information. Our approach prioritizes transparency, data minimization, and clear avenues for users to exercise their access and correction rights. We maintain records of processing activities to ensure accountability and respond to lawful requests in accordance with applicable data protection requirements in Singapore and, where relevant, international standards.
Key Definitions
For clarity, the following terms are used consistently throughout this policy. Definitions are intended to assist users in understanding how data categories and processing activities relate to the services offered by Lumvani.
What Data We Collect
Lumvani collects data directly from users, automatically through platform interactions, and from trusted third parties to provide, personalize, and secure our services. Collection is limited to information necessary for the stated operational purposes.
Data Provided Directly by Users
When you register for courses or contact support, we collect the information you provide to enable account creation, enrollment, billing, and communication related to service delivery.
- Identity and contact information (name, email address, phone number)
- Professional profile details (job title, employer, industry experience)
- Credentials and certification documents uploaded for course verification
- Billing and payment information submitted for course purchases
- Support requests, feedback, and correspondence with Lumvani staff
- Optional assessment responses and collection materials submitted for evaluation
Data Collected Automatically
To operate and improve the platform we gather technical and usage data through automated means. This information supports service reliability, analytics, and security monitoring.
- Device and browser information, operating system details
- IP address and approximate geolocation derived for fraud prevention and localization
- Usage data including pages visited, course progress, and interaction timings
- Performance metrics and error logs to diagnose technical issues
- Cookie and tracking identifiers used to remember preferences and measure engagement
- Analytics data for aggregated trend analysis used to improve course content and delivery
Data from Third Parties
Where authorized by users or required to fulfill services, Lumvani may receive data from third-party service providers, corporate training partners, or verification services to validate credentials and facilitate seamless enrollment.
- Corporate account administrators providing participant lists and corporate billing details
- Identity verification and background check results provided by verified vendors when necessary for course eligibility
- Payment processing providers sharing transaction confirmations and billing records
Purposes of Processing
We use collected personal data for clearly defined operational, legal, and improvement purposes that align with the expectations of learners and partners.
- Provision and administration of training services, course access, and assessment delivery
- Processing payments, invoicing, and managing subscriptions or corporate billing arrangements
- Communicating administrative notices, course updates, and user support messages
- Personalizing learning recommendations and maintaining accurate progress records
- Maintaining platform security, preventing fraud, and detecting unauthorized activity
- Conducting aggregated analytics and research to improve curricula and user experience
- Meeting legal obligations and responding to lawful requests from regulatory authorities
- Facilitating legitimate business operations such as partner integrations and corporate reporting
Lawful Bases for Processing
We process personal data on lawful bases appropriate to the activity, including contractual necessity, legitimate interests for service improvements, compliance with legal obligations, and user consent where required by law.
- Performance of a contract — processing required to provide paid or free learning services and related functions
- Legitimate interests — for platform security, fraud prevention, and service improvement where rights and freedoms of users are respected
- Legal obligation — to comply with statutory duties and enforceable regulatory obligations
- Consent — where specified activities (such as certain marketing communications) rely on user consent and may be opted out at any time
Rights of Data Subjects (General Data Protection Principles)
Although Lumvani primarily operates under Singapore jurisdiction, we recognize the value of general data protection principles aligned with international norms. Where applicable, individuals may exercise rights consistent with widely accepted data protection frameworks.
- Right to access personal data processed by Lumvani and to request copies of information held
- Right to rectification of inaccurate or incomplete personal data
- Right to erasure in certain circumstances, subject to legal and contractual retention needs
- Right to restrict or object to processing based on legitimate interests in specified cases
- Right to data portability for personal data provided by the user where technically feasible
- Right to withdraw consent at any time for processing activities previously consented to
Cookies and Tracking Technologies
Lumvani uses cookies and similar technologies to support core functionality, remember preferences, and provide analytics that improve course delivery. Users can manage cookie preferences through their browser and platform settings.
We deploy strictly necessary cookies for authentication and session management, performance cookies for analytics, and functional cookies to remember user preferences and local settings.
Cookie categories include: essential (required for platform operation), performance and analytics (aggregate usage insights), and functional (user preferences and interface personalization). Marketing cookies are used only with explicit consent.
Users can manage cookies via browser controls and opt out of non-essential tracking in their account settings. Detailed cookie settings and purposes are available on our cookie preference center located on wbani.club.
View Lumvani cookie preferences and detailed cookie list at wbani.club/cookies
Data Sharing and Disclosures
Lumvani shares personal data only as necessary to deliver services, comply with legal obligations, and support legitimate business operations. Third-party recipients are vetted and bound by confidentiality and data protection requirements.
- Service providers delivering hosting, platform analytics, and payment processing
- Corporate training partners and employers who sponsor or administer participant access
- Regulators and law enforcement when required by applicable law or to respond to valid legal process
- Verification vendors engaged to confirm identity or professional credentials on a case-by-case basis
- Professional advisors, auditors, or contractors working under confidentiality to support Lumvani operations
- Aggregated and anonymized data outputs used for reporting and product improvement that do not identify individuals
International Transfers of Personal Data
Personal data may be processed and stored in jurisdictions outside Singapore when necessary to provide the service (for example, cloud hosting or third-party vendors). Transfers are governed by contractual safeguards and assessments of adequate protection levels.
Where data is transferred internationally, Lumvani uses standard contractual clauses, vendor assessments, and technical controls to maintain appropriate protections aligned with applicable legal requirements.
Data Retention and Deletion
Lumvani retains personal data only for as long as required to fulfill the purposes described in this policy or to comply with legal, tax, or contractual obligations. Retention periods are reviewed regularly to minimize unnecessary storage.
Account data and enrollment history are retained while the account is active and for a reasonable period after account closure to meet administrative and legal needs, unless a deletion request is accepted and processed.
Support correspondence and transactional messages are retained according to operational needs and dispute resolution requirements; retention periods may vary by message type and legal considerations.
Technical logs, security monitoring records, and audit trails are retained for a period necessary to ensure platform integrity and to contribute incidents, subject to internal policies and legal obligations.
Users may request deletion of their personal data where permitted by law. Deletion requests are evaluated to reconcile user rights with obligations to retain certain records for compliance, fraud prevention, or contractual reasons.
Security Measures
Lumvani applies layered security controls to protect personal data, combining technical, administrative, and physical safeguards. Controls are regularly reviewed to address emerging risks and maintain confidentiality, integrity, and availability of user information.
- Encryption of data in transit and at rest, role-based access controls, and secure authentication mechanisms
- Regular security assessments, vendor due diligence, incident response planning, and staff training on data protection best practices
- We perform regular security assessments, maintain encrypted backups of essential data, and restrict administrative access using role-based controls and multi-factor authentication where applicable.
User Rights and Controls
As a data subject in Singapore, you have a set of rights regarding your personal data processed by Lumvani. We describe how to exercise each right and the conditions under which we may apply lawful limitations.
- Right of access: You may request confirmation of whether we process your personal data and obtain a copy of the data we hold about you.
- Right to rectification: If your personal data is inaccurate or incomplete, you may request correction or supplementation of that data.
- Right to erasure: Subject to legal and operational limitations, you may request deletion of personal data that is no longer necessary for the purposes for which it was collected.
- Right to restriction of processing: You may request limits on processing where accuracy is contested or processing is unlawful but deletion is not feasible.
- Right to data portability: Where technically feasible, you may request a copy of personal data you provided to Lumvani in a structured, commonly used and machine-readable format.
- Right to object: You may object to processing of your personal data for direct marketing or on grounds relating to your particular situation, subject to legal allowances.
- Right to withdraw consent: If processing is based on consent, you may withdraw that consent at any time; withdrawal will not affect lawfulness of prior processing.
- Right to lodge a complaint: If you are not satisfied with our response, you may escalate the matter to the relevant supervisory authority in Singapore, such as the Personal Data Protection Commission (PDPC).
How to exercise your data rights
Submit a request via our web form at https://wbani.club/contact or send a signed request to our postal address. Include a clear description of the right you wish to exercise and sufficient information to identify your account. We may request additional information to verify your identity before acting on a request.
We aim to acknowledge receipt of rights requests within 7 calendar days and to provide a substantive response within 30 calendar days. In complex cases we may extend this period and will notify you with reasons for any extension.
Marketing communications
Lumvani may send emails about course updates, events, and promotions where you have opted in. Marketing communications are based on consent or our legitimate interest to offer relevant professional development opportunities. We tailor messages to industry interests and past interactions where permitted.
You can opt out of marketing at any time using the unsubscribe link included in emails or by updating your preferences on your account settings page. Processing related to your active course enrolments or transactional messages will continue despite marketing opt-outs.
Children and minors
Our services and courses are intended for adult learners and professionals. We do not knowingly collect personal data from individuals under 16 without verifiable parental or guardian consent. If you believe a child under 16 has provided personal data to Lumvani, contact us to request removal.
Third-party links and integrations
Our website and learning platform may contain links to third-party services and embed tools from external providers. Those services are governed by the third party’s privacy practices. Lumvani is not responsible for third-party content or their data handling practices; review their policies before submitting personal information.
Changes to this privacy policy
We periodically review and may update this privacy policy to reflect changes in our services, legal requirements, or operational practices. Material changes will be posted on our site with an updated effective date. Continued use of our services after publication constitutes acceptance of the revised policy.