Privacy Policy

1. Who We Are

The data controller for personal data collected through this website and our courses is:

2. Data We Collect

We collect personal data through the following means:

2.1 Contact and Enquiry Forms

When you submit an enquiry form on this website, we collect your name, email address, phone number (if provided), and the content of your message.

2.2 Enrolment

When you enrol in a course, we collect your name, email address, phone number, and payment information. Payment details are processed by a third-party payment provider and are not stored on our servers.

2.3 Course Participation

When you participate in a course — including submitting assignments, participating in community discussions, or communicating with instructors — that content is stored and associated with your account.

2.4 Website Usage

We collect basic analytics data about how the website is used — including pages visited, session duration, and device type — through privacy-respecting analytics tools. This data is aggregated and not linked to individual identifiers.

3. How We Use Personal Data

We use personal data for the following purposes:

• Responding to enquiries — to answer questions submitted through contact forms.
• Course delivery — to give you access to course materials, review assignments, and provide instructor feedback.
• Administrative communication — to send cohort schedules, updates, and other course-related messages.
• Improving our courses — to understand how students are progressing and where material can be improved.
• Legal compliance — to meet applicable legal obligations.

We do not use personal data for automated profiling or make automated decisions that significantly affect you.

4. Legal Basis for Processing

Depending on how and why we process your data, the legal basis is one of the following:

• Contract performance — processing necessary to fulfil the terms of your enrolment.
• Consent — where you have given explicit consent, such as for optional marketing messages.
• Legitimate interests — for enquiry responses and general website improvement, where those interests do not override your rights.
• Legal obligation — where processing is required by applicable law.

5. Data Retention

We retain personal data for the following periods:

• Enquiry form submissions: 12 months from submission, unless a course enrolment follows.
• Student records and assignment work: 3 years from course completion.
• Financial and payment records: 7 years as required by Thai accounting regulations.
• Analytics data: retained in aggregated, non-identifiable form indefinitely.

After these periods, personal data is deleted or anonymised.

6. Data Sharing

We do not sell personal data. We share data with third parties only as follows:

• Payment processors — to handle course fee transactions securely.
• Email delivery services — to send administrative and course-related messages.
• Hosting and infrastructure providers — to operate the website and course platform.
• Legal authorities — where required by applicable law or lawful order.

All third-party processors are required by contract to protect personal data and use it only for the stated purpose.

7. Data Security

We take reasonable technical and organisational measures to protect personal data, including:

• HTTPS encryption for all data in transit
• Access controls limiting which staff can view personal data
• Regular review of security practices
• Breach notification procedures — if a breach occurs affecting your data, we will notify you without undue delay

No system can be made entirely secure. If you believe your data has been compromised, contact us at [email protected] immediately.

8. Cookies

This website uses cookies to support basic functionality and to understand how the site is used. Essential cookies cannot be disabled. Optional analytics and preference cookies can be controlled through our Cookie Policy page, where you can also manage your preferences.

9. Your Rights

Under applicable data protection law, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data, subject to our legal retention obligations.
• Portability — request your data in a commonly used, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, write to [email protected]. We will respond within 30 days. If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand or the relevant supervisory authority in your jurisdiction.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before sharing any personal data with them.

11. Children's Privacy

Our courses and website are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that a person under 18 has submitted personal data, we will delete it promptly. Contact us at [email protected] if you believe this has occurred.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Enrolled students will be notified of material changes by email. Continued use of our services after changes become effective constitutes acceptance of the updated policy.