Privacy Policy

This Privacy Policy explains how Panya Academy ("we", "us", "our") collects, uses, and protects personal information when you visit our website or enrol in one of our online courses. We take our responsibilities under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) seriously and aim to be clear and straightforward about what we do with your data.

If you have questions about this policy or your personal data, please contact us at [email protected].

1. Who We Are

Panya Academy is an online school for AI development, registered and operating in Bangkok, Thailand. Our address is 401 Sukhumvit 71, Watthana, Bangkok 10110. We are the data controller for personal information collected through this website and our course platforms.

2. What Personal Data We Collect

We collect personal information in the following situations:

• Enquiry form submissions: name, email address, and phone number if you provide it voluntarily.
• Course enrolment: name, email address, phone number, and payment information processed via our payment provider.
• Course participation: exercise submissions, written responses, and communications with mentors.
• Website usage: technical data such as IP address, browser type, and pages visited, collected via cookies and analytics tools when you consent to their use.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the PDPA:

• Contract: to deliver the course you have enrolled in and manage your account.
• Legitimate interests: to respond to enquiries, improve our courses, and maintain the security of our systems.
• Consent: for optional analytics cookies and marketing communications, where you have actively agreed.

4. How We Use Your Data

• To respond to enquiries sent through the contact form.
• To process enrolments and manage your access to course materials.
• To enable mentor feedback and communication within your course.
• To send course-related communications (weekly reminders, feedback notifications, administrative updates).
• To analyse how our website is used, in aggregate, to improve the experience — only where cookie consent has been given.
• To comply with legal obligations where required.

We do not use your personal data for advertising profiling or sell it to third parties for marketing purposes.

5. Data Sharing

We share personal data with third parties only where necessary:

• Payment processing: payment details are handled directly by our payment provider and are not stored on our servers.
• Course platform: exercise submissions and mentor communications are stored on our course platform provider's servers, which are operated under data processing agreements.
• Analytics: where you have consented to analytics cookies, aggregated usage data may be processed by a third-party analytics provider.
• Legal obligation: we may disclose data to authorities if required by Thai law.

6. Data Retention

• Enquiry form data: up to 12 months from the date of submission if no enrolment follows.
• Student records and course work: retained for 3 years after course completion for administrative and legal purposes, then deleted.
• Payment records: retained as required under Thai financial record-keeping requirements (typically 5–7 years).
• Analytics data: retained in aggregate form only; no individual browsing data is kept beyond 26 months.

7. Cookies

We use essential cookies to keep the website functioning and optional analytics and preference cookies where you have consented. You can manage your preferences using the cookie banner on our website or visit our Cookie Policy for full details.

8. Data Protection Measures

• Data is transmitted over HTTPS (TLS encryption).
• Access to personal data within our team is restricted to those with a genuine need.
• Our platform and hosting providers are subject to contractual data protection obligations.
• In the event of a data breach that poses a risk to individuals, we will notify the Office of the Personal Data Protection Committee (PDPC) and affected individuals within the timeframes required by the PDPA.

9. Your Rights Under the PDPA

As a data subject under the PDPA, you have the following rights:

• Right to access: to request a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct inaccurate or incomplete data.
• Right to erasure: to request that we delete your data, subject to legal retention requirements.
• Right to data portability: to receive your data in a common electronic format where applicable.
• Right to object: to object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.
• Right to lodge a complaint: with the Office of the Personal Data Protection Committee (PDPC) if you believe your rights have been infringed.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

11. Children's Privacy

Our courses are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For significant changes, we will also notify enrolled students by email. Continued use of our services after any changes constitutes your acknowledgement of the updated policy.

13. Contact

For data-related enquiries:

• Email: [email protected]
• Address: Panya Academy, 401 Sukhumvit 71, Watthana, Bangkok 10110, Thailand