Privacy Policy

1. Data Controller

The data controller responsible for your personal data is Rungroj, located at 210 Bang Na-Trat Road, Bang Na, Bangkok 10260, Thailand. For data-related queries, contact us at [email protected].

2. What Data We Collect

We collect personal data in the following ways:

• Enquiry form: Name, email address, and optionally phone number and a message. Used to respond to your enquiry and, if you enrol, to administer your course.
• Course enrolment: Name, email address, and payment reference. Required to deliver the course and maintain records of completion.
• Course submissions: Code, written assignments, and project files you share with your mentor. Retained for the duration of your enrolment and for a period of six months afterward.
• Website usage: Anonymised analytics data (pages visited, session duration) collected via cookies if you have consented. See our Cookie Policy for details.

3. Legal Basis for Processing

We process your data under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and on the following bases:

• Contract: Processing necessary to deliver the course you have enrolled in.
• Consent: Analytics cookies and any marketing communications, where you have given explicit consent.
• Legitimate interests: Responding to your enquiry before enrolment; improving our courses using anonymised feedback.

4. How We Use Your Data

• To respond to enquiries and provide information about courses
• To deliver your enrolled course and assign you a mentor
• To communicate about your enrolment, schedule, and submissions
• To improve course content using anonymised feedback
• To fulfil legal obligations including tax and accounting records

We do not sell your personal data. We do not share it with third parties for marketing purposes.

5. Data Retention

• Enquiry data: Retained for 12 months if no enrolment follows, then deleted.
• Course records: Retained for three years after course completion for administrative and accounting purposes.
• Course submissions: Retained for six months after course end, then deleted.
• Analytics data: Anonymised and retained in aggregate for up to 24 months.

6. Data Protection Measures

We take reasonable technical and organisational measures to protect your data:

• Data transmitted to our site is encrypted via HTTPS
• Access to learner data is limited to named staff with a direct role in course delivery
• Course submissions are stored in access-controlled environments
• In the event of a data breach, we will notify affected individuals and the relevant authority within 72 hours where required under applicable law

7. Cookies

We use essential cookies required for site operation and, with your consent, analytics cookies to understand how the site is used. You can manage your cookie preferences at any time via our Cookie Policy page.

8. Third-Party Services

We use a small number of third-party services:

• Payment processing: Payments are handled via bank transfer or PromptPay and are not processed through our website.
• Analytics: Anonymised usage analytics may be collected via Google Analytics where you have consented.

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites.

9. Your Rights

Under Thailand's PDPA, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate data
• Erasure: Request deletion of your data where we have no legal obligation to retain it
• Data portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdrawal of consent: Withdraw consent for analytics or marketing at any time without affecting prior processing
• Complaint: Lodge a complaint with Thailand's Personal Data Protection Committee (PDPC)

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our courses are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact [email protected] and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email to enrolled learners and noted on this page with an updated date. Continued use of our site after changes constitute acceptance of the revised policy.