Legal

Privacy Policy

Last Updated: 18 April 2025 · Effective: 18 April 2025

1. Introduction

Chatri Academy ("we", "us", "our") is committed to protecting the personal information of individuals who interact with our website and enrol in our programmes. This policy explains what information we collect, how we use it, and what rights you have regarding your data.

This policy applies to all personal data processed in connection with our website at chatriaa.biz and our programme enrolment processes. Our registered place of business is 92 Huay Kaew Road, Mueang Chiang Mai, Chiang Mai 50200, Thailand.

If you have questions about this policy or how we handle your data, please contact us at [email protected].

2. Data We Collect

Information you provide directly

Name and contact details (email address, telephone number)
Enquiry and message content submitted through our contact form
Programme enrolment information (name, contact details, payment information)
Communications sent to us by email or telephone

Information collected automatically

Browser type, device type, and operating system
Pages visited and time spent on our website
IP address (anonymised for analytics purposes)
Cookie data as described in our Cookie Policy

Legal basis for processing (Thai PDPA)

We process your personal data on the following lawful grounds under Thailand's Personal Data Protection Act B.E. 2562 (2019):

Consent — for optional cookies and marketing communications
Contractual necessity — for processing your programme enrolment and delivering services
Legitimate interests — for responding to enquiries and improving our programmes
Legal obligation — where required to comply with Thai law

3. How We Use Your Data

To respond to enquiries submitted through our contact form
To process programme enrolments and deliver course materials
To communicate with enrolled learners about their programme
To provide post-completion correspondence where applicable
To improve our website and programme content based on usage data
To fulfil legal and regulatory obligations

We do not use your personal data for automated decision-making or profiling. We do not sell personal data to third parties.

4. Data Sharing

We share personal data only where necessary:

Faculty members involved in delivering your enrolled programme, who are bound by confidentiality obligations
Payment processors handling programme fees securely
Website hosting providers operating our technical infrastructure
Analytics services (where you have consented to analytics cookies)
Thai authorities, where disclosure is required by law

We do not share personal data with financial product providers or third-party marketing services.

5. Data Protection Measures

Data transmitted via our website is encrypted using TLS (HTTPS)
Access to personal data is restricted to staff who require it for their function
Programme records are stored on password-protected systems
Staff with access to personal data are informed of their obligations under the Thai PDPA
In the event of a data breach, affected individuals will be notified without undue delay where required by law

6. Cookies

We use cookies to operate the website and, with your consent, to understand how it is used. Please see our Cookie Policy for full information on the types of cookies we use and how to manage your preferences.

7. Data Retention

Enquiry data submitted through our contact form: retained for 12 months unless an enrolment follows
Programme enrolment records: retained for 5 years following programme completion for administrative and legal purposes
Financial and payment records: retained as required under Thai accounting law (generally 5 years)
Analytics data: retained in anonymised form for up to 26 months

8. Your Rights

Under Thailand's Personal Data Protection Act, you have the following rights:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate data
Right to erasure — to request deletion of your data in certain circumstances
Right to restriction — to request we limit processing of your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests
Right to withdraw consent — at any time, for processing based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies separately.

10. Children's Privacy

Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received data from a minor, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will update the date at the top of this page. We encourage you to review it periodically. Continued use of our website following an update constitutes acceptance of the revised policy.

12. Contact Information

For any questions or requests relating to this privacy policy or your personal data:

Email: [email protected]
Post: Chatri Academy, 92 Huay Kaew Road, Mueang Chiang Mai, Chiang Mai 50200, Thailand
Phone: +66 53 482 7196