Privacy Policy

Introduction

Khwamru ("we", "us", "our") takes the privacy of learners and website visitors seriously. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over your information.

This policy applies to all personal data collected through our website at khwamru.cyou and through the enrolment and learning processes associated with our AI development courses. It covers data collected from individuals located in Thailand and elsewhere.

We operate in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA). If you have questions about this policy or how we handle your data, please contact us at [email protected].

What data we collect and why

We collect personal data in the following circumstances:

Contact and enquiry data

When you complete our contact form, we collect your name, email address, and optionally your phone number and message. This data is used solely to respond to your enquiry. Legal basis: legitimate interest in responding to communications from prospective learners.

Enrolment and course data

When you enrol in a course, we collect your name, email address, payment reference, and course progress data. This is necessary to provide the service you have purchased. Legal basis: performance of a contract.

Website usage data

With your consent, we may collect anonymised analytics data (pages visited, time on page, device type) to understand how the website is used and to improve it. Legal basis: consent, which you may withdraw at any time via our cookie settings.

Data retention

Contact enquiry data is retained for twelve months. Enrolment and course completion records are retained for three years following the last activity on your account. Analytics data is retained for a maximum of fourteen months. Payment records are retained for seven years to comply with Thai tax law.

How we use your data

• To respond to enquiries sent through our contact form
• To process course enrolments and provide access to course materials
• To send you updates about your course, including notifications of material updates
• To improve course content and website usability based on aggregated usage patterns
• To comply with applicable Thai law, including tax and financial record-keeping requirements

We do not sell or share your personal data with third parties for marketing purposes. We do not send unsolicited marketing communications. If you have enrolled in a course, we may occasionally send relevant updates about that course or related programmes. You may opt out of these at any time by contacting [email protected].

How we protect your data

We take reasonable technical and organisational steps to protect personal data against unauthorised access, loss, or disclosure. These measures include:

• HTTPS encryption for all data transmitted between your browser and our website
• Access controls limiting who can view personal data internally
• Secure hosting with reputable providers that maintain their own security certifications
• Regular review of our data handling practices

In the event of a data breach that is likely to affect your rights or freedoms, we will notify affected individuals and the relevant Thai supervisory authority within 72 hours of becoming aware of the breach.

Cookies

Our website uses cookies for functionality (keeping the site working), analytics (understanding usage patterns), and optionally for marketing purposes. Essential cookies are always active. Others require your consent.

For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

Your rights under Thai PDPA

Under Thailand's Personal Data Protection Act, you have the following rights in relation to your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Rectification: You may ask us to correct inaccurate data.
• Erasure: You may ask us to delete your personal data where it is no longer needed or where consent has been withdrawn.
• Portability: Where data is processed by automated means, you may request it in a commonly used machine-readable format.
• Object to processing: You may object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Complaint: You have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Third-party links

Our website and course materials may contain links to external websites or tools (such as GitHub, documentation sites, or cloud provider consoles). We are not responsible for the privacy practices of third-party sites. We recommend reviewing the privacy policy of any external site you visit.

Children's privacy

Our courses are designed for adults and intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under 18. If we become aware that a minor has provided personal data, we will take steps to delete it promptly.

Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are material, we will notify enrolled learners by email at least 14 days before the changes take effect. Continued use of our website or courses following notification constitutes acceptance of the updated policy.