Privacy Policy

Your privacy matters to us. This policy explains how we collect, use, and protect your personal information when you use our corporate finance analytics platform.

Last Updated: March 15, 2025

Information We Collect

We collect information that helps us provide better corporate finance analytics services to our users in Thailand and beyond. Here's what we gather and why:

Account Information

  • Full name and professional title
  • Business email address
  • Company name and industry sector
  • Phone number for account verification
  • Professional experience level

Usage Analytics

  • Platform navigation patterns
  • Financial models accessed
  • Time spent on different modules
  • Feature engagement metrics
  • Learning progress tracking

Technical Data

  • IP address and location data
  • Browser type and version
  • Device specifications
  • Operating system information
  • Connection quality metrics

Voluntary Information: Some data collection is optional, such as demographic surveys or feedback forms. You can choose not to provide this information without affecting your access to core platform features.

How We Use Your Data

Your information helps us deliver personalized learning experiences and maintain platform quality. We use collected data for specific business purposes:

  • Service Delivery: Creating customized learning paths based on your experience level and goals
  • Platform Improvement: Analyzing usage patterns to enhance our financial modeling tools and educational content
  • Communication: Sending course updates, new feature announcements, and relevant industry insights
  • Technical Support: Troubleshooting account issues and providing personalized assistance
  • Security: Monitoring for fraudulent activity and protecting user accounts from unauthorized access
  • Legal Compliance: Meeting regulatory requirements in Thailand and other jurisdictions where we operate

We don't sell your personal information to third parties or use it for unrelated marketing purposes. Our focus remains on providing quality corporate finance education and analytics tools.

Data Sharing & Disclosure

We limit data sharing to essential business operations and legal requirements. Here's when and why we might share your information:

Sharing Purpose Information Shared Recipients
Payment Processing Billing information, transaction details Authorized payment processors in Thailand
Technical Infrastructure Usage metrics, performance data Cloud service providers with data processing agreements
Legal Requirements Account information as required by law Thai government agencies, law enforcement
Business Partnerships Aggregated, anonymized usage statistics Educational partners for content development

Third-Party Safeguards: All service providers who handle your data sign comprehensive data protection agreements and must meet our security standards. We regularly audit these relationships to ensure compliance.

Your Privacy Rights

You have significant control over your personal information. These rights apply regardless of your location, though specific procedures may vary based on local laws:

Access Your Data

Request a complete copy of all personal information we store about you, including account details, usage history, and any automated decision-making records.

Correct Information

Update or fix any inaccurate personal data in your account. Most information can be changed directly through your user profile settings.

Delete Your Account

Request complete removal of your personal data from our systems. Some information may be retained for legal compliance or legitimate business interests.

Limit Processing

Restrict how we use your information while maintaining your account access. You can opt out of non-essential data processing activities.

Data Portability

Receive your personal data in a structured, machine-readable format that you can transfer to another service provider if desired.

Withdraw Consent

Remove permission for data processing activities that require your consent, such as marketing communications or optional feature usage.

To exercise any of these rights, contact our privacy team at [email protected]. We'll respond within 30 days and may need to verify your identity before processing certain requests.

Security Measures

We implement comprehensive security measures to protect your information from unauthorized access, modification, or disclosure:

  • Encryption: All data transmission uses TLS 1.3 encryption, and sensitive information is encrypted at rest using AES-256 standards
  • Access Controls: Employee access to personal data is limited to job requirements and logged for audit purposes
  • Regular Audits: Quarterly security assessments and penetration testing to identify and address vulnerabilities
  • Secure Infrastructure: Data centers in Thailand meet international security certifications including ISO 27001
  • Incident Response: Documented procedures for handling data breaches, with notification protocols for affected users
  • Staff Training: Regular privacy and security training for all employees who handle personal information

Security Notifications: We'll notify you within 72 hours if a data breach affects your personal information, along with steps you can take to protect yourself.

Data Retention

We keep your information only as long as necessary for business operations and legal compliance. Retention periods vary by data type:

Data Category Retention Period Reason for Retention
Account Information Duration of account plus 2 years Service provision and support
Learning Progress Duration of account plus 1 year Continuity of educational experience
Payment Records 7 years from transaction date Thai tax and audit requirements
Usage Analytics 18 months from collection Platform improvement and optimization
Support Communications 3 years from last interaction Quality assurance and training

When retention periods expire, we securely delete or anonymize your information. Some data may be retained longer if required by legal obligations or ongoing disputes.

International Data Transfers

While our primary operations are based in Thailand, some data processing may occur in other countries for technical or business reasons:

  • Cloud Infrastructure: We use reputable cloud providers with data centers in Southeast Asia and Europe
  • Backup Systems: Encrypted backups may be stored in multiple geographic locations for disaster recovery
  • Support Services: Some customer support operations may be handled by trusted partners in other countries
  • Analytics Tools: Anonymized usage data may be processed by international analytics providers

Transfer Safeguards: All international data transfers use approved mechanisms such as Standard Contractual Clauses or adequacy decisions. We ensure equivalent protection regardless of processing location.

Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience and understand how our platform is used. You have control over these technologies:

  • Essential Cookies: Required for basic platform functionality, including login sessions and security features
  • Analytics Cookies: Help us understand user behavior and improve our services (can be disabled)
  • Preference Cookies: Remember your settings and customizations across sessions
  • Performance Cookies: Monitor platform performance and identify technical issues

You can manage cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may limit platform functionality but won't prevent you from accessing core features.

Thailand Law Compliance

As a company operating in Thailand, we comply with the Personal Data Protection Act (PDPA) and other relevant Thai regulations:

  • Lawful Basis: We process personal data based on legitimate interests, contractual necessity, or explicit consent
  • Local Representative: Our Thai legal representative handles PDPA compliance and regulatory communications
  • Data Subject Rights: Thai residents have specific rights under PDPA, including data portability and erasure
  • Breach Notification: We follow PDPA requirements for notifying authorities and individuals about data breaches
  • Cross-Border Transfers: International data transfers comply with PDPA requirements for adequate protection

PDPA Complaints: If you have concerns about our data processing practices, you can contact the Personal Data Protection Commission of Thailand or file a complaint through their official channels.

Privacy Contact Information

For any privacy-related questions, concerns, or requests, please contact our dedicated privacy team:

Privacy Officer Contact

We're here to help with any privacy questions or concerns about your personal data.

Email [email protected]
Phone +6674355330
Address 104/1 Changklan Rd, Tambon Chang Moi
Mueang Chiang Mai District
Chiang Mai 50100, Thailand

When contacting us about privacy matters, please include your account email address and a detailed description of your request. We'll respond within 30 days and may need to verify your identity for security purposes.

This privacy policy may be updated periodically to reflect changes in our practices or legal requirements. We'll notify you of significant changes through email or platform notifications.