Privacy notice

Last updated: 20 September 2026

Who handles your information

BRIEF is a brand of Lux Aura Co., Ltd., the controller of personal information handled through this website and project enquiries.

For enquiries or privacy requests, email hello@luxauraltd.com.

Information and purposes

When you send a project enquiry, we receive your name, email address, the offer you want to promote and your campaign goal. You may also provide your audience, brand or website, timing and budget. We use this information and subsequent correspondence to assess your request, reply and prepare a proposal. Required fields are needed to process the online enquiry; optional fields can be left blank. Please do not include health records, identity documents or other sensitive personal information.

We process enquiries to take steps you request before entering into a contract. Our legitimate interests in handling business communications and protecting the website also support relevant processing. Information required for legal obligations is handled on that basis. Sending an enquiry does not subscribe you to marketing emails.

Visiting the website also involves technical information such as IP address, browser or device information, requested pages and request times. Hosting and security services process this information to deliver the site, prevent abuse and provide operational or traffic statistics. Cloudflare Turnstile checks technical browser and connection signals when the online enquiry form is enabled.

Drafts and browser storage

Typing a brief does not send its contents to us. The copy or download option keeps the brief on your device; sending it is a separate action. Our form does not save your draft in browser storage. The website does not include advertising pixels or embedded YouTube or Instagram players: campaign previews are hosted on the site. Hosting, access controls and security services may use necessary browser technologies. This notice does not imply that those providers process no technical data.

Services that handle information

We use OpenAI Sites for hosting, Cloudflare for infrastructure and Turnstile protection, Resend for delivering enquiry emails, and Google Workspace for receiving, storing and replying to them. These services and their relevant subprocessors handle information needed for their respective roles. Cloudflare also describes its own processing to improve bot detection in its Turnstile notice. We may disclose information where legally required or necessary to establish or defend legal claims. We do not sell enquiry information.

Provider information: OpenAI, Cloudflare Turnstile, Resend and Google Workspace.

International processing

Our business is based in Thailand. Our providers operate internationally, so information may be processed outside Thailand or your country, including in the United States and other provider locations. Applicable transfer requirements must be met, using an appropriate legal basis and safeguards where required. You can contact us for information about the arrangements relevant to your enquiry.

How long information is kept

For enquiries that do not become client projects, our retention policy is deletion within 12 months of the last substantive contact. If an enquiry becomes a client relationship, relevant information forms part of the project record and is retained for the contract and applicable accounting, tax or legal requirements. Information needed for an active dispute or legal obligation may be kept longer for that purpose.

The enquiry system sends messages into our business mailbox; it does not automatically delete mailbox copies. We manage deletion of those copies. Technical logs, security signals and provider backups have separate retention periods determined by their service arrangements and purposes; the 12-month enquiry policy is not a promise that all provider logs are retained for that period.

Your rights

Depending on applicable law, you may request access to or a copy of your information, correction, deletion, restriction, portability, or object to processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Rights are subject to applicable conditions and exceptions. Contact hello@luxauraltd.com to make a request; we may ask for proportionate information to verify your identity. You may also complain to Thailand’s Personal Data Protection Committee or another competent supervisory authority where applicable.

Updates

We will update this notice when our handling of information changes. The date above identifies the latest revision.

Company details