Privacy Policy

1. Data We Collect

When you interact with our website or sign up for a programme, we may collect:

• Contact details — name, email address, and phone number submitted through enquiry or enrolment forms.
• Technical data — IP address, browser type, device information, pages visited, and time spent on pages, collected via analytics tools.
• Communication records — emails or messages you send us directly.
• Cookie data — preference and analytics cookies, as described in our Cookie Policy.

Legal basis: We process contact data on the basis of your consent (form submission) and our legitimate interest in operating our educational services. Technical and analytics data are processed under our legitimate interest in improving the website experience.

Retention: Contact enquiry data is retained for up to 24 months from last interaction. Analytics data is typically aggregated and anonymised after 14 months.

2. How We Use Your Data

We use collected information for the following purposes:

• Responding to enquiries and providing information about our programmes.
• Processing enrolments and managing the learner relationship.
• Sending relevant programme updates or curriculum announcements — you may opt out at any time.
• Analysing website usage to improve content and navigation.
• Complying with applicable legal obligations.

We do not sell your personal data to third parties. We do not use your data for automated decision-making that produces significant legal effects.

3. Data Sharing with Third Parties

We may share data with trusted service providers acting on our behalf, including:

• Analytics platforms (such as Google Analytics) to understand how visitors use our site.
• Email delivery services used to send communications you have requested.
• Payment processors for handling enrolment fees — we do not store card details ourselves.

All third-party providers are bound by data processing agreements and may not use your data for their own purposes.

4. Data Protection Measures

• Data in transit is protected using TLS/HTTPS encryption.
• Access to personal data is restricted to staff with a clear operational need.
• We conduct periodic internal reviews of our data handling practices.
• In the event of a data breach affecting your rights, we will notify you and, where required, the relevant supervisory authority within the timeframes prescribed by the PDPA.

5. Cookies

Our website uses cookies for essential functionality, analytics, and preference storage. Essential cookies cannot be disabled, but analytics and marketing cookies are optional and controlled by your consent.

For a full description of the cookies we use, how long they last, and how to manage them, please see our Cookie Policy.

6. Your Rights

Under the PDPA and applicable data protection frameworks, you have the right to:

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

7. Third-Party Links

Our website may contain links to external sites for reference or further reading. We are not responsible for the privacy practices of those sites and encourage you to review their policies before sharing personal information.

8. Minors

Our programmes are intended for individuals aged 18 and above. We do not knowingly collect data from anyone under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. When changes are material, we will post a notice on our website and update the "Last Updated" date at the top. Continued use of our website after the effective date of an update constitutes your acknowledgement of the revised policy.