— Legal

Privacy Policy

We want to be clear about what information we collect, why we collect it, and how you can manage it. This policy applies to all Panya AI services and this website.

Last updated: 1 June 2025

1. Data Controller

Panya AI operates this website and the associated online learning services. Our registered address is 95 Ratchadamri Road, Lumphini, Bangkok 10330, Thailand. If you have questions about how we handle your data, you can reach us at [email protected] or by calling +66 2 634 7290.

2. What We Collect

We collect only the information that helps us deliver and improve our courses. This includes:

  • Contact details you provide when enquiring or enrolling — your name, email address, and phone number
  • Course progress and assessment data generated as you work through lessons
  • Correspondence with our mentors and support team
  • Technical data collected automatically by your browser — IP address, browser type, pages visited, and session duration
  • Payment information processed through our third-party payment provider — we do not store card details ourselves

We do not collect sensitive personal data such as health information, national ID numbers, or biometric data.

3. How We Use Your Data

We use the information we collect to:

  • Process enrolments and manage your access to course materials
  • Provide mentor feedback and learning support
  • Respond to enquiries and support requests
  • Send course-related updates and, where you have agreed, information about new offerings
  • Analyse how the website and courses are used so we can improve them
  • Meet our legal and financial obligations

We do not use your data for automated decision-making that produces legal or significant effects.

5. Sharing Your Data

We do not sell your personal data to third parties. We share data only where necessary:

  • With payment processors to handle enrolment transactions securely
  • With hosting and infrastructure providers who store data on our behalf, under data processing agreements
  • With email service providers used to send course communications
  • With analytics tools that help us understand website usage — configured to anonymise data where possible
  • With Thai authorities or courts where required by law

Where data is transferred outside Thailand, we take steps to ensure appropriate safeguards are in place.

6. Retention

We keep your personal data for as long as your account is active or as needed to provide services. After that, we retain certain records for up to seven years to meet our legal and financial obligations under Thai law. Course progress and assessment records are kept for three years after course completion. You can request deletion of your data at any time — see Your Rights below.

7. Your Rights

Under Thailand's Personal Data Protection Act (PDPA) and applicable law, you have the right to:

  • Access a copy of the personal data we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion of your data, where no legal obligation requires us to retain it
  • Restrict or object to certain types of processing
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
  • Lodge a complaint with the relevant data protection authority

To exercise any of these rights, write to us at [email protected]. We will respond within 30 days.

8. Cookies

We use cookies to remember your preferences, analyse how pages are used, and keep sessions secure. You can manage cookie settings when you first visit the site or at any time through your browser. For a full explanation, please read our Cookie Policy.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data in transit is encrypted using TLS. Access to personal data within our team is limited to those who need it to do their work. No system is perfectly secure, and we cannot promise absolute protection, but we take these responsibilities seriously and review our practices regularly.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you by email. Continuing to use our services after a policy update means you accept the revised terms.

11. Contact Us

If you have any questions about this policy or how we handle your data, please get in touch: