Privacy Policy

1. Introduction

Codethicket ("we", "our", "us") operates an online AI development school based at 30/7 Chang Khlan Road, Chang Khlan, Mueang Chiang Mai, Chiang Mai 50100, Thailand. This Privacy Policy explains how we collect, use, store, and protect personal data provided to us through our website at codethicket.world and through the enrolment process for our courses.

We operate in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). If you have questions about how we handle your data, contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: name, email address, and optionally phone number and a message.
• Course enrolment: name, email address, and payment-related information processed through our payment partners.
• Cookies and analytics: pages visited, session duration, and device/browser type — collected with your consent via our cookie consent mechanism.

We do not collect sensitive personal data (such as health, financial, or identity document information) unless explicitly required for a specific service, in which case we will inform you and obtain separate consent.

Legal basis for processing: consent (for cookies and marketing), contract performance (for course delivery), and legitimate interest (for responding to enquiries).

Retention: Enquiry data is kept for up to 12 months. Enrolment data is kept for the duration of the course relationship and up to 3 years thereafter for administrative purposes. Analytics data is retained for 14 months.

3. How We Use Your Data

• To respond to your enquiries about courses.
• To deliver the course content and services you have enrolled in.
• To send you course-related communications (updates, changes to material, new editions).
• To analyse website usage in aggregate form to improve the site and course material.
• To comply with our legal obligations under Thai law.

We do not sell your personal data to third parties. We do not use your data for automated profiling or decision-making that produces legal or significant effects on you.

Marketing: We will only send you communications about new courses or updates if you have opted in to receive them. You can withdraw this consent at any time by contacting us at [email protected].

4. Third-Party Services

We may share your data with the following categories of third-party service providers where necessary to operate our services:

• Payment processors: to handle course fee transactions securely. Payment data is processed directly by the payment provider and not stored by us.
• Analytics providers: we may use aggregated, anonymised analytics tools (e.g. Google Analytics) subject to your cookie consent. We configure these to minimise data collection.
• Email service providers: to deliver transactional emails related to your enrolment.

All third-party providers used by Codethicket are required to handle data only as instructed by us and to maintain appropriate security measures.

5. Data Protection Measures

• All data transmitted between your browser and our website is encrypted via TLS (HTTPS).
• Access to personal data is restricted to Codethicket team members who require it to carry out their responsibilities.
• We do not store payment card details — these are handled by our payment processor.
• In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of it, as required by the PDPA.

6. Cookies

We use cookies to operate the website and, with your consent, to understand how it is used. Cookie types include:

• Essential cookies: required for the site to function. These cannot be disabled.
• Analytics cookies: help us understand visitor behaviour in aggregate. Only active with your consent.
• Preference cookies: remember your settings across visits. Only active with your consent.

See our full Cookie Policy for details and to manage your preferences.

7. Your Rights Under the PDPA

As a data subject under Thailand's Personal Data Protection Act, you have the following rights:

• Right to access: request a copy of the personal data we hold about you.
• Right to rectification: ask us to correct inaccurate or incomplete data.
• Right to erasure: request deletion of your data where there is no longer a lawful basis for processing it.
• Right to data portability: receive your data in a structured, commonly used format.
• Right to object: object to processing based on legitimate interest, including direct marketing.
• Right to withdraw consent: withdraw any consent you have given at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: file a complaint with the Personal Data Protection Committee of Thailand (PDPC) if you believe your rights have been violated.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Links to Other Websites

Our website may contain links to external resources and third-party tools. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies before submitting any personal data to them.

9. Minimum Age

Our courses are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us at [email protected] so we can remove it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For significant changes, we will notify enrolled learners by email. Continued use of our website after a policy update constitutes acceptance of the revised terms.

11. Contact for Data Enquiries

Data Controller: Codethicket

Address: 30/7 Chang Khlan Road, Chang Khlan, Mueang Chiang Mai, Chiang Mai 50100, Thailand

Email: [email protected]

Phone: +66 53 327 148