Privacy Policy

We collect the following categories of personal data:

• Contact data: name, email address, and phone number (if provided) submitted via our enquiry form.
• Enrolment data: course selection, payment reference, and correspondence related to your enrolment.
• Usage data: pages visited, time spent on the site, browser type, and approximate location — collected through analytics cookies if consent is given.
• Submitted work: exercises, projects, and messages submitted as part of course participation.

Data is collected through enquiry forms on the website, direct email communication, and course platform activity.

Legal bases for processing: contract performance (for enrolled learners), legitimate interest (for enquiry follow-up), and consent (for analytics and marketing communications).

Retention: Contact enquiries are retained for 12 months if no enrolment follows. Enrolment records and submitted work are retained for three years after course completion. Analytics data is retained for 14 months.

Personal data is used for:

• Responding to enquiries about our courses
• Managing enrolment and course access
• Delivering exercise feedback and mentor sessions
• Sending course-related communications (schedules, updates, feedback notifications)
• Improving course materials based on aggregate usage patterns
• Complying with legal obligations

Marketing communications: We will only send promotional messages if you have opted in. You may withdraw consent at any time by contacting us at [email protected].

Third-party sharing: We do not sell personal data. We may share limited data with service providers who assist with payment processing, website hosting, and email delivery — subject to data processing agreements. We do not share data with advertising networks.

We take reasonable technical and organisational measures to protect personal data, including:

• HTTPS encryption for all data transmitted via the website
• Access controls limiting staff access to personal data to those with a need
• Regular review of data handling practices
• Secure storage of submitted course work and enrolment records

In the event of a data breach that is likely to affect your rights, we will notify you and the relevant supervisory authority within the timeframes required by Thai PDPA.

We use essential cookies to keep the site functioning and, with your consent, analytics cookies to understand how the site is used. We do not use advertising or tracking cookies without explicit consent.

You can manage your cookie preferences at any time via our Cookie Policy page.

Under Thailand's PDPA, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate data.
• Right to erasure: You may request deletion of your data where it is no longer necessary for the purpose it was collected.
• Right to restrict processing: You may ask us to pause processing your data in certain circumstances.
• Right to data portability: You may request your data in a commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you are not satisfied with our response, you may raise a complaint with the Personal Data Protection Committee of Thailand.

Data Controller: Tensora

Address: 9 Chao Fah Road, Wichit, Muang, Phuket 83000, Thailand

Privacy email: [email protected]