Privacy Policy
We take care with your personal information. This policy explains plainly what we collect, how we use it, and the choices available to you.
Last updated: 10 June 2025
1. Introduction
Panya ("we", "us", "our") operates an AI development online school based at 99 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand. This Privacy Policy describes how we handle personal data collected through our website and services.
We are committed to handling your information with care and in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable data protection principles.
If you have any questions about this policy or how your data is handled, please contact us at [email protected].
2. Data We Collect
We collect personal data only when you provide it directly, or when it is collected automatically as part of normal website operation.
Information you provide
- Your name and email address when you submit a contact or enrolment enquiry form
- Any message content or questions you include in a form submission
- Your phone number, if you choose to provide it
Information collected automatically
- Browser type, device type, and operating system
- Pages visited, time spent, and referring URLs
- IP address (stored in anonymised form where possible)
- Cookie and tracking data (see Section 5 and our Cookie Policy)
Legal basis for processing
- Consent — for marketing communications and optional cookies
- Legitimate interest — for website analytics and security monitoring
- Contractual necessity — to process enrolment enquiries and course access
- Legal obligation — where required by Thai law
Retention: Contact enquiry data is retained for up to 24 months. Website analytics data is retained for up to 26 months. We review and delete data that is no longer needed on a regular basis.
3. How We Use Your Data
We use personal data only for the purposes described below and do not sell or rent your information to third parties.
- Responding to enquiries and providing information about our programmes
- Processing course enrolments and managing learner access
- Sending relevant programme updates or notifications you have consented to receive
- Improving our website through aggregated usage analysis
- Meeting legal and regulatory obligations
Third-party services we use
- Google Analytics 4 — aggregated website usage statistics
- Meta Pixel — advertising reach measurement (with your consent)
- Microsoft Advertising (Bing) — advertising measurement (with your consent)
Each of these services operates under its own privacy terms. We configure them to minimise data collection wherever possible.
4. How We Protect Your Data
- All data is transmitted over encrypted HTTPS connections
- Access to personal data is restricted to staff who need it to perform their role
- We review access permissions regularly and remove them when no longer required
- In the event of a data breach affecting your personal information, we will notify you promptly and in accordance with our obligations under the PDPA
- We conduct periodic internal reviews of our data handling practices
5. Cookies
We use cookies to support essential site functions and, with your consent, for analytics and advertising measurement.
Essential
Required for basic site operation and your cookie preference storage. Always active.
Analytics
Help us understand how visitors use the site so we can make improvements.
Marketing
Used to measure the effectiveness of advertising. Only active with your consent.
Preferences
Remember settings such as your chosen language or display options.
Full details and preference controls are available on our Cookie Policy page.
6. Your Rights
Under Thailand's PDPA, you have the following rights regarding your personal data:
Right to access
Request a copy of the personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete information.
Right to erasure
Request deletion of your personal data, subject to legal retention obligations.
Right to data portability
Receive your data in a structured, machine-readable format.
Right to object
Object to certain types of processing, including direct marketing.
Right to withdraw consent
Withdraw consent you have previously given at any time, without affecting prior processing.
Right to lodge a complaint
File a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have been infringed.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
7. Third-Party Links
Our website may link to external websites for reference or further reading. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any site you visit via an external link.
8. Children's Privacy
Our programmes and website are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us and we will remove it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will provide additional notice by email or a prominent notice on our website. Continued use of our site after changes take effect constitutes acceptance of the updated policy.
10. Contact for Data Matters
If you have any questions or concerns about this Privacy Policy or the way we handle your data, please reach out — we are happy to help.