Privacy Policy

1. Introduction

Cortexia ("we", "us", "our") operates an online AI development school based at 88 Asok Montri Road, Khlong Toei Nuea, Watthana, Bangkok 10110, Thailand. We are committed to handling personal data with care and transparency.

This Privacy Policy explains what personal data we collect from visitors and enrolled learners, how we use and protect it, and what rights you have under the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and related regulations.

By using this website or enrolling in any Cortexia course, you acknowledge that you have read this policy. If you have questions, contact us at [email protected].

2. Data We Collect

2.1 Data You Provide

• Contact form submissions: name, email address, phone number (optional), and message content.
• Course enrolment: name, email address, phone number, and payment details (processed by a third-party payment provider — we do not store card numbers).
• Forum and course activity: posts, project submissions, and feedback responses within the learning platform.

2.2 Data Collected Automatically

• Cookies and analytics: session identifiers, pages visited, time on page, browser type, and approximate location (country/city level). See our Cookie Policy for details.
• Log data: IP address, referrer URL, and access timestamps retained for up to 90 days for security purposes.

2.3 Legal Basis for Processing

• Contract performance: processing necessary to deliver the course you enrolled in.
• Consent: analytics cookies and marketing communications, where you have opted in.
• Legitimate interest: website security, fraud prevention, and improving course content.
• Legal obligation: retaining records as required under Thai law.

2.4 Retention Periods

• Enrolment and course records: 3 years after course completion.
• Contact form submissions: 12 months from the date of submission.
• Analytics data: 14 months on a rolling basis.
• Security logs: 90 days.

3. How We Use Your Data

• Course delivery: managing your enrolment, providing access to materials, and sending feedback on submitted projects.
• Communication: responding to enquiries sent through the contact form, and sending course-related notifications (schedule changes, live session links).
• Platform improvement: analysing how learners interact with course materials to identify areas that need clarification or restructuring.
• Security: detecting and preventing unauthorised access to learner accounts and course content.
• Legal compliance: retaining records as required by Thai taxation and consumer protection law.

3.1 Marketing Communications

We will only send promotional emails (new courses, special offers) if you have explicitly opted in. You can unsubscribe at any time by clicking the link in any marketing email or writing to [email protected].

3.2 Third-Party Sharing

We do not sell your personal data. We share it only with:

• Payment processors: to complete transactions (e.g. Stripe or similar). They operate under their own privacy policies and PCI-DSS compliance.
• Analytics providers: such as Google Analytics, under data processing agreements. Data is anonymised where possible.
• Legal authorities: if required by Thai law, court order, or to protect the rights and safety of Cortexia and its learners.

4. How We Protect Your Data

• Encryption in transit: all data transmitted between your browser and our servers uses TLS encryption (HTTPS).
• Access controls: personal data is accessible only to team members who need it to perform their role. Access logs are reviewed regularly.
• Storage: data is stored on servers located in data centres that meet industry security standards.
• Breach notification: in the event of a data breach affecting your personal data, we will notify you and the Office of the Personal Data Protection Committee (PDPC) within the timeframe required by Thai PDPA.
• Security reviews: we conduct periodic reviews of our data handling practices and update them as needed.

5. Cookies

We use essential cookies to operate the site and optional cookies for analytics and preference storage. You can manage your cookie choices at any time through our Cookie Policy page, which includes toggles for each category.

• Essential cookies: always active, required for the site to function.
• Analytics cookies: optional, used to understand how visitors interact with our content.
• Preference cookies: optional, remember settings such as language and display choices.
• Marketing cookies: optional, used if we run targeted advertising campaigns.

6. Your Rights Under Thai PDPA

As a data subject under the Thailand Personal Data Protection Act B.E. 2562, you have the following rights:

• Right to access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your data where there is no lawful reason to retain it.
• Right to data portability: request your data in a structured, machine-readable format where technically feasible.
• Right to object: object to processing based on legitimate interest, particularly for direct marketing.
• Right to withdraw consent: withdraw consent for processing activities based on consent at any time without affecting prior processing.
• Right to lodge a complaint: if you believe we have mishandled your data, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) at www.pdpc.or.th.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our course materials and website may contain links to external resources, tools, or documentation. These links lead to websites and services not operated by Cortexia. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing personal data to any third-party service.

8. Children's Privacy

Cortexia courses are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a minor has submitted personal data through our website or enrolled in a course, we will delete that data promptly. If you believe a minor has provided us with personal data, please contact us at [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify enrolled learners by email. Your continued use of our services after such changes constitutes acceptance of the updated policy.

10. Contact for Data Enquiries

Data Controller: Cortexia

• Address: 88 Asok Montri Road, Khlong Toei Nuea, Watthana, Bangkok 10110, Thailand
• Email: [email protected]
• Phone: +66 2 261 7548
• Response time: within 30 days of receiving your request