Privacy Policy

1. Data Controller

The data controller for personal information collected through thongsuka is:

• Business name: thongsuka
• Address: 123 Sukhumvit Soi 39, Watthana, Bangkok 10110, Thailand
• Email: [email protected]
• Phone: +66 91-653-2847

2. Data We Collect

Information you provide directly

• Full name and contact details (email address, phone number) submitted through our enquiry or enrollment forms
• Messages and queries you send through our contact form
• Payment details where relevant to course enrollment (processed via third-party payment providers; we do not store card numbers)

Information collected automatically

• Website usage data via analytics cookies (page views, session duration, referral sources)
• Technical data including IP address, browser type, and device information
• Cookie consent preferences stored in your browser's local storage

Legal basis for processing

We process personal data on the following legal bases under Thailand's Personal Data Protection Act (PDPA): consent (for marketing and non-essential cookies), contractual necessity (for delivering course services to enrolled participants), legitimate interest (for improving our services and responding to enquiries), and legal obligation (where required by Thai law).

3. How We Use Your Data

• To respond to enquiries and provide information about our courses
• To process course enrollment and manage participant accounts
• To deliver course content, send session links, recordings, and materials
• To communicate important updates regarding your course
• To improve our curriculum, materials, and delivery based on feedback
• To comply with legal and regulatory requirements in Thailand
• To analyse website usage patterns and improve our online presence

We do not use personal data to make automated decisions that significantly affect you.

4. Data Retention

We retain personal data for the following periods:

• Enquiry data (non-enrollment): up to 12 months from last contact
• Enrolled participant data: up to 5 years from course completion, for record-keeping and alumni communications
• Payment records: 7 years in line with Thai accounting requirements
• Website analytics data: up to 26 months in aggregated form

After these periods, data is securely deleted or anonymised.

5. Data Sharing

We do not sell personal data. We share data with third parties only in the following circumstances:

• Service providers who support our operations (e.g. video conferencing platforms, payment processors, email delivery services) under appropriate data processing agreements
• Analytics services (e.g. Google Analytics) to understand website usage — only in aggregated or anonymised form where possible
• Regulatory or legal authorities where required by Thai law

All third-party processors are required to handle your data in line with applicable data protection standards.

6. Data Security

• Data is stored on secure servers with access controls and encryption in transit
• Access to personal data is restricted to staff with a legitimate need
• We conduct regular reviews of our data handling practices
• In the event of a data breach affecting your rights, we will notify you and the relevant Thai authority as required by the PDPA

7. Cookies

Our website uses cookies to function and to improve your experience. For full details of the cookies we use and how to manage your preferences, please read our Cookie Policy.

8. Your Rights Under the PDPA

As a data subject under Thailand's Personal Data Protection Act, you have the right to:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data where we no longer have a lawful basis to hold it
• Object to processing based on legitimate interest
• Withdraw consent at any time (without affecting the lawfulness of prior processing)
• Request restriction of processing in certain circumstances
• Lodge a complaint with the Personal Data Protection Committee of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external resources such as the Stock Exchange of Thailand or SEC Thailand websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

10. Children's Privacy

Our courses and website are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have collected data from a minor, please contact us and we will delete it promptly.

11. Policy Updates

We may update this Privacy Policy from time to time. Where changes are significant, we will notify enrolled participants by email. Continued use of our website or services after changes take effect constitutes acceptance of the updated policy. The date at the top of this page reflects the most recent revision.

12. Contact for Privacy Matters

For any questions or requests relating to your personal data, please contact us at:

• Email: [email protected]
• Post: thongsuka, 123 Sukhumvit Soi 39, Watthana, Bangkok 10110, Thailand
• Phone: +66 91-653-2847 (Monday–Friday, 9:00 AM–6:00 PM)