Privacy Policy

1. Data We Collect

When you use our website or contact us about our courses, we may collect the following categories of personal information:

• Contact details — name, email address, and phone number submitted through enquiry forms.
• Course interest — the program or topic you enquire about, so we can respond with relevant information.
• Usage data — pages visited, time on site, browser type, and device type, collected via analytics tools.
• Cookie data — preferences and consent records stored locally in your browser. See Section 5 for more detail.

We collect only what is reasonably necessary. We do not collect government ID numbers, financial payment details, or sensitive personal data unless you choose to share such information with us directly.

2. Legal Basis and Data Retention

We process your personal data on the following legal grounds:

• Consent — for marketing emails and optional cookies, where you have opted in.
• Legitimate interest — for responding to course enquiries and improving our website content.
• Contractual necessity — for administering your enrolment if you join one of our programs.

We retain enquiry and contact data for up to 24 months from the date of last contact. Course-related records are kept for 5 years for administrative purposes. Analytics data is retained in aggregated form and not linked to individuals beyond 14 months.

Our processing practices are consistent with the Thai Personal Data Protection Act B.E. 2562 (PDPA), which came into full effect in June 2022.

3. How We Use Your Data

Personal information collected through our website is used for the following purposes:

• Responding to course enquiries and providing information about our programs.
• Sending follow-up communications relevant to your selected area of interest.
• Administering enrolment, onboarding, and course access for learners who join us.
• Improving website content, navigation, and course offerings based on usage patterns.
• Meeting legal or regulatory obligations where applicable.

We do not sell your personal data to third parties. We do not use your information for automated decision-making or profiling that produces significant effects on you.

If you have opted into marketing communications, we may send you occasional updates about new courses or learning resources. You may opt out at any time by emailing [email protected].

4. Data Sharing with Third Parties

We work with a small number of trusted service providers who may process your data on our behalf:

• Google Analytics — for anonymised website usage statistics. Data is processed in accordance with Google's Data Processing Terms.
• Email delivery providers — to send transactional and follow-up messages. These providers act as data processors under contractual terms.
• Hosting infrastructure — our website is hosted on servers that comply with industry security standards.

All third-party providers are selected carefully and are contractually required to protect personal data. We do not share your information with advertising networks or data brokers.

5. Cookies

Our website uses cookies to remember your preferences and understand how visitors navigate our pages. We use the following categories:

• Essential cookies — always active; required for the website to function correctly.
• Analytics cookies — optional; help us understand which pages are most useful.
• Marketing cookies — optional; used to track referral sources and campaign performance.
• Preference cookies — optional; remember settings you have selected.

You can manage your cookie preferences at any time via our Cookie Policy page, which includes interactive controls.

6. Data Protection and Security

We take reasonable technical and organisational steps to protect personal data from loss, misuse, or unauthorised access:

• Secure HTTPS encryption for all data transmitted through our website.
• Access to personal data is restricted to authorised staff only.
• We review our security practices on a regular basis.
• In the event of a data breach that is likely to affect your rights, we will notify relevant individuals and, where required, the appropriate supervisory authority, within a reasonable timeframe.

7. Your Rights

Under the Thai PDPA and applicable data protection principles, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct any inaccurate or incomplete data.
• Right to erasure — request deletion of your data, subject to legal retention requirements.
• Right to data portability — receive your data in a structured, machine-readable format where technically feasible.
• Right to object — object to processing carried out on the basis of legitimate interest.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.
• Right to lodge a complaint — you may contact the Office of the Personal Data Protection Committee (PDPC) of Thailand if you have concerns about how your data is handled.

To exercise any of these rights, please contact us at [email protected]. We aim to respond within 30 days.

8. Third-Party Links

Our website may contain links to external websites, learning resources, or community platforms. We are not responsible for the privacy practices of those sites and encourage you to review their policies before sharing personal information.

9. Age Restrictions

Our courses and services are intended for individuals who are at least 18 years of age. We do not knowingly collect personal data from anyone under this age. If we become aware that personal data of a minor has been submitted, we will remove it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website following any changes constitutes acceptance of the updated policy.

11. Contact for Data Enquiries

If you have questions about this Privacy Policy or would like to exercise your data rights, please contact us:

• Email: [email protected]
• Address: 54 Pattaya Klang Road, Bang Lamung, Chonburi 20150, Thailand
• Phone: +66 38 415 729 (Mon–Fri, 09:00–18:00 ICT)

Data controller: Gradient Lab, operating from Pattaya, Chonburi, Thailand.