Privacy Policy
Draft for legal review — pending final business and legal verification. This text has not yet been approved by a lawyer. Fields marked [TO VERIFY:] must be completed before launch.
Version 2 · Effective date: [TO VERIFY: date of approval]
1. Who is responsible
Lao Culture Media [TO VERIFY: registered legal name of the business], Ban Phan Luang, Luang Prabang, Lao PDR [TO VERIFY: full registered address and registration number] is responsible for your personal data on this website. Contact for privacy questions: contact@laoculturemedia.com, +856 20 55 28 19 16.
2. What we collect and why
| Data | Why |
|---|---|
| Account: name, email address, password (stored only as a secure hash) | To give you access to your licences and downloads. |
| Orders: billing name, country, email, items, licence type, resolution, price, payment status | To fulfil the contract, issue certificates, handle refunds, keep accounting records. |
| Payment | Handled by our payment provider [TO VERIFY: BCEL]. We receive the payment status and a transaction reference, never your full card or bank details. |
| Downloads: date and time, a one-way hash of your IP address, browser type | To apply download limits and detect misuse of licences. |
| Quote requests and messages: what you write and your contact details | To answer you. |
| Licence certificates: licensee name, item, licence type | Anyone with a certificate number and its check code can confirm a licence at /verify/. Nothing else is shown. |
3. Cookies
We use only the cookies needed to sign you in, keep your cart and protect forms. We do not use advertising or analytics trackers, and our pages load no third-party tracking scripts.
4. Where your data is stored and who processes it
- Hostinger: hosting of the website and database (servers in Malaysia).
- Cloudflare R2: private storage of original media files and rights documents (Asia-Pacific region). Files are not public and are delivered through links that expire after 10 minutes.
- Payment provider: [TO VERIFY: BCEL] processes payments.
- Email: order and download emails are sent through our hosting email service.
These providers process data only to provide their service to us. [TO VERIFY: wording on international data transfers]
5. How long we keep it
Orders and licence records: as long as the licence exists and at least as long as accounting law requires, because they prove your right to use the Content. Download logs: 24 months (deleted automatically). Quote requests: 24 months after the last message. Accounts: until you ask us to close yours, except records we must keep.
6. Your rights
You can ask to see, correct, export or delete your data, or object to how we use it, by emailing contact@laoculturemedia.com. We answer within 30 days. Records needed to prove a licence or required by law may be kept after an account is closed. You may also complain to the data-protection authority of your country.
7. Security
All connections use HTTPS. Original files and rights documents are stored privately. Repeated failed sign-ins are blocked. Staff accounts use two-factor sign-in. [TO VERIFY: confirm two-factor sign-in is active for all staff accounts before approval]
8. Changes
We will publish any change here with a new version number and date.