1. Information We Collect

Personal Information You Provide

When you interact with our platform, we collect information you voluntarily provide. This happens when you create an account, enroll in courses, or contact our support team.

• Full name and preferred name
• Email address and phone number
• Billing address and payment information
• Educational background and professional experience
• Learning preferences and course selections
• Communications with our support team

Technical Information

Our systems automatically collect certain technical data to improve your experience and maintain platform security. We gather device information, IP addresses, browser types, and interaction patterns with our educational content.

Learning Analytics

To help you progress effectively, we track your course completion rates, quiz performance, time spent on materials, and areas where you might need additional support. This data helps us personalize your learning journey.

2. How We Use Your Information

We use collected data for specific purposes related to delivering and improving our educational services. Every use case serves a legitimate business need or fulfills our contractual obligations to you.

3. Data Sharing and Third Parties

We don't sell your personal information. Period. However, we work with trusted partners who help us deliver our services effectively.

Service Providers We Work With

• Payment Processors: Secure handling of transactions and billing (all payment card data is processed by PCI-DSS compliant providers)
• Email Services: Delivery of course materials, notifications, and support communications
• Cloud Hosting: Platform infrastructure and data storage with enterprise-grade security
• Analytics Tools: Understanding how students use our platform to make improvements
• Customer Support Software: Managing inquiries and providing timely assistance

All third-party providers sign data processing agreements and must comply with applicable privacy laws. They can only use your data for the specific services they provide to us.

Legal Requirements

We may disclose information when required by Thai law, in response to valid legal processes, or to protect our rights and the safety of our users.

4. Your Rights Under Thai PDPA

Thailand's data protection law gives you several rights over your personal information. We've built systems to honor these rights efficiently.

Access and Portability

You can request a copy of all personal data we hold about you. We'll provide this in a structured, commonly used format within 30 days. There's no charge for your first request each year.

Correction and Updates

Found something outdated or incorrect? You can update most information directly in your account settings. For other changes, contact our support team and we'll make corrections within 15 days.

Deletion Rights

You can request deletion of your personal data, though we may need to retain certain information for legal or legitimate business purposes like financial records, completed transactions, or dispute resolution.

Objection and Restriction

You can object to certain types of data processing, particularly for marketing purposes. You also have the right to restrict processing in specific situations, such as while we verify data accuracy.

Withdraw Consent

For processing based on your consent, you can withdraw that consent anytime. This won't affect the lawfulness of processing before withdrawal.

5. Data Security Measures

We implement technical and organizational measures to protect your information from unauthorized access, loss, or misuse.

Technical Safeguards

• End-to-end encryption for data transmission using TLS 1.3
• Encrypted storage of sensitive information at rest
• Regular security audits and vulnerability assessments
• Multi-factor authentication for staff access to systems
• Automated backup systems with secure off-site storage
• Intrusion detection and prevention systems

Organizational Measures

Our team receives regular privacy and security training. Access to personal data is limited to employees who need it for their roles. We maintain strict policies on data handling and conduct background checks on staff with data access.

Despite our efforts, no internet transmission is completely secure. We encourage you to use strong passwords and keep your login credentials confidential.

6. Data Retention

We keep your data only as long as necessary for the purposes outlined in this policy or as required by law.

After retention periods expire, we securely delete or anonymize data so it can no longer identify you.

7. International Data Transfers

Your data is primarily stored on servers located in Thailand. However, some of our service providers operate globally, which may involve transferring data outside Thailand.

When we transfer data internationally, we ensure appropriate safeguards are in place through standard contractual clauses approved by data protection authorities, adequacy decisions, or other legally recognized transfer mechanisms.

You can request information about the safeguards we use for specific transfers by contacting us.

8. Cookies and Tracking

We use cookies and similar technologies to improve your experience on our platform. These small files help us remember your preferences, analyze site usage, and provide personalized content.

Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function properly, including login and security features
• Performance Cookies: Help us understand how visitors interact with our site by collecting anonymous usage data
• Functionality Cookies: Remember your preferences and choices to personalize your experience
• Analytics Cookies: Provide insights into course engagement and learning patterns

You can control cookies through your browser settings. Blocking certain cookies may affect platform functionality. We don't use advertising cookies or sell data to advertisers.

9. Children's Privacy

Our services are designed for adults pursuing professional development in financial modeling. We don't knowingly collect personal information from individuals under 18 years old.

If we discover we've inadvertently collected data from someone under 18, we'll delete it promptly. Parents or guardians who believe we may have information about a minor should contact us immediately.

10. Changes to This Policy

We review and update this privacy policy periodically to reflect changes in our practices, technology, or legal requirements. We'll notify you of significant changes through email or prominent notices on our platform.

Continued use of our services after changes become effective means you accept the updated policy. We encourage you to review this policy regularly to stay informed about how we protect your information.

Previous versions of this policy are available upon request.

11. Data Protection Officer

We've designated a Data Protection Officer to oversee our privacy practices and handle your inquiries. They're available to answer questions about how we handle your personal information and to assist with exercising your rights.

Our DPO conducts regular privacy impact assessments and ensures our practices align with Thai PDPA requirements.

12. Complaints and Regulatory Authority

If you have concerns about how we handle your personal data, please contact us first. We're committed to resolving issues promptly and fairly.

You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe we've violated your privacy rights. However, we'd appreciate the opportunity to address your concerns directly before you approach the regulator.