Privacy Policy | Panya AI

1. Introduction

Panya AI ("we", "us", "our") is committed to protecting the personal data of learners, prospective students, and visitors to our website. This policy describes what data we collect, how it is used, the legal basis for processing, and the rights you hold under applicable law. Our operations are based at 9 Rama IX Road, Huai Khwang, Bangkok 10310, Thailand, and we comply with the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and other applicable data protection legislation.

2. Data We Collect

We collect the following categories of personal data:

Contact data: name, email address, telephone number, provided when you submit an enquiry or enrolment form.
Course data: programme enrolled in, assignment submissions, mentor feedback records, progress notes.
Payment data: processed through our payment partner. We do not store card details directly.
Technical data: IP address, browser type, operating system, and pages visited — collected via server logs and, where consent is given, analytics cookies.
Communication records: emails and messages exchanged with our team.

3. Legal Basis for Processing

Contract performance: processing necessary to deliver the course you have enrolled in.
Legitimate interests: improving our curriculum, handling enquiries, and maintaining service security.
Consent: analytics cookies and marketing communications, where you have opted in. You may withdraw consent at any time.
Legal obligation: retaining financial records as required under Thai law.

4. How We Use Your Data

Delivering course access and mentor feedback
Responding to enquiries and providing support
Processing enrolment and payment
Sending course-related communications and updates
Improving curriculum and course materials
Complying with legal and regulatory obligations
Marketing communications, only where you have given consent

5. Data Sharing

We do not sell personal data. We may share data with the following categories of third party where necessary:

Payment processors for transaction handling
Cloud hosting providers for course platform and data storage
Email service providers for delivering course communications
Analytics providers (Google Analytics) where cookie consent has been given
Legal or regulatory authorities where required by law

All third-party providers are required to handle data securely and in accordance with applicable law.

6. Data Retention

Enquiry data: 12 months from last contact
Enrolled learner data: duration of enrolment plus 3 years
Financial records: 7 years as required under Thai law
Technical/server log data: 90 days
Marketing consent records: until consent is withdrawn

7. Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data, including encrypted data storage, access controls limited to authorised staff, regular security reviews, and procedures for responding to data breaches within 72 hours of discovery where legally required.

8. Cookies

Our website uses cookies. Essential cookies are always active. Optional analytics and marketing cookies are used only where you have provided consent via the cookie banner. You can manage your preferences at any time on our Cookie Policy page.

9. Your Rights

Under the Thailand PDPA, you have the following rights:

Right to be informed about how your data is used
Right to access a copy of your personal data
Right to rectify inaccurate data
Right to erasure ("right to be forgotten") in certain circumstances
Right to data portability
Right to object to processing based on legitimate interests
Right to withdraw consent at any time, without affecting prior processing
Right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of third-party websites. We encourage you to review their policies before providing personal data.

11. Children's Privacy

Our courses are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have received data from a minor, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email to enrolled learners and posted on this page with a revised effective date. Continued use of our services after the effective date constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or to exercise your rights:

Email: [email protected]
Address: Panya AI, 9 Rama IX Road, Huai Khwang, Bangkok 10310, Thailand