Privacy Policy

Information We Collect

We gather different types of information depending on how you interact with our platform. Some data you provide directly, while other information gets collected automatically as you use our services.

Personal Information You Provide

• Your name, email address, and phone number when you register for our learning programs
• Billing information and payment details when enrolling in paid courses
• Professional background and education history for program placement
• Communication preferences and language settings
• Questions or feedback you submit through our contact forms

Information Collected Automatically

• Device information including browser type, operating system, and IP address
• Usage patterns like which pages you visit and how long you spend on them
• Learning progress data including course completion rates and assessment scores
• Technical data about errors or performance issues you encounter
• Geographic location data (city-level only, not precise GPS coordinates)

How We Use Your Information

Your data helps us deliver better educational experiences and keep our platform running smoothly. Here's what we do with the information we collect.

We don't sell your personal information to third parties. Period. We also avoid using your data for purposes unrelated to education unless we get your explicit consent first.

Data Sharing and Third Parties

Sometimes we need to share limited information with other organizations to keep things running. But we're picky about who we work with and what they can do with your data.

Service Providers We Work With

• Payment processors: Handle transactions securely but never see your full payment card details
• Email services: Help us send course updates and important notifications
• Cloud hosting: Store your learning materials and progress data safely
• Analytics tools: Show us how people use the platform (without identifying you personally)
• Customer support software: Manage your questions and help requests efficiently

Legal Requirements

We might disclose your information if required by Thai law, court orders, or government requests. This could happen during legal proceedings, tax audits, or investigations into illegal activities. We'll notify you about such requests unless legally prohibited from doing so.

Your Rights Under Thai PDPA

Thailand's data protection law gives you several rights over your personal information. You can exercise these rights by contacting us directly.

• Access: Request a copy of the personal data we hold about you
• Correction: Ask us to fix inaccurate or incomplete information
• Deletion: Request removal of your data when it's no longer needed
• Restriction: Limit how we process your information in certain situations
• Portability: Receive your data in a common format to transfer elsewhere
• Objection: Oppose processing based on legitimate interests
• Withdraw consent: Revoke permission for activities requiring your consent

How to Exercise Your Rights

Send your request to contact@brainy-net.com with "Data Rights Request" in the subject line. Include your full name and the email address associated with your account. We'll respond within 30 days and may ask for identity verification to protect your privacy.

Some rights have limitations. For example, we can't delete financial records we're legally required to keep for tax purposes. We'll explain any restrictions that apply to your specific request.

Data Security Measures

Protecting your information is a top priority. We use multiple layers of security to prevent unauthorized access, accidental loss, or data breaches.

• Industry-standard encryption for data transmission (TLS 1.3)
• Encrypted storage for sensitive personal and financial information
• Regular security audits and vulnerability assessments
• Access controls limiting staff access to necessary data only
• Secure authentication systems with password requirements
• Continuous monitoring for suspicious activity
• Regular backups stored in secure, separate locations

Despite our precautions, no internet transmission is completely secure. If we detect a data breach that could harm you, we'll notify you within 72 hours as required by Thai law and provide guidance on protective steps you can take.

Data Retention Periods

We keep your information only as long as necessary for legitimate business purposes or legal requirements. Different types of data have different retention schedules.

After these periods expire, we securely delete or anonymize your data. You can request earlier deletion in most cases, though we might need to keep certain records for legal compliance.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to remember your preferences and understand how you use our platform. You can control most cookies through your browser settings.

Types of Cookies We Use

• Essential cookies: Required for basic site functionality like logging in and accessing your courses
• Preference cookies: Remember your settings like language choice and display preferences
• Analytics cookies: Help us understand which features are most useful and where improvements are needed
• Security cookies: Detect suspicious activity and protect against unauthorized access

Most browsers let you refuse cookies or alert you when sites try to place them. Keep in mind that disabling certain cookies might affect your ability to use some platform features.

International Data Transfers

While our primary operations are in Thailand, some of our service providers operate servers in other countries. When we transfer data internationally, we ensure adequate protection through approved mechanisms.

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions recognizing comparable privacy protections
• Specific safeguards built into our service provider agreements

Your data might be processed in countries with different privacy laws than Thailand, but we maintain the same level of protection regardless of location.

Children's Privacy

Our services target adults interested in financial education. We don't knowingly collect information from anyone under 18 years old. If you're a parent who believes your child provided us with personal information, contact us immediately and we'll delete it.

Changes to This Policy

We update this privacy policy occasionally to reflect new practices or legal requirements. When we make significant changes, we'll notify you by email or through a prominent notice on our platform.

The "Last Updated" date at the top shows when we last revised this document. Continuing to use our services after changes take effect means you accept the updated policy.

Third-Party Links

Our platform might contain links to external websites or resources. We're not responsible for the privacy practices of these third parties. Always review their privacy policies before sharing personal information on sites outside brainy-net.com.