Privacy Policy

1. Introduction

Phra Lab ("we", "us", "our") is an AI development school based at 89 Pridi Banomyong Road, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand. We are committed to handling personal data with care and transparency. This policy describes what data we collect, why we collect it, how we use it, and what rights you have regarding it.

This policy applies to all personal data collected through our website and through the enrolment and enquiry processes for our programmes. By using our website or submitting an enquiry, you acknowledge that you have read this policy.

Questions about this policy may be directed to [email protected].

2. Data We Collect

We may collect the following categories of personal data:

• Name, email address, and phone number (submitted via our enquiry form)
• Enrolment information including the programme selected and payment records
• Correspondence sent to us by email or through our website
• Technical data such as browser type, IP address, and pages visited (collected via analytics tools)
• Cookie preferences stored in your browser

We collect this data when you submit an enquiry, enrol in a programme, contact us directly, or visit our website.

The legal bases for processing your data are: your consent (for marketing communications and analytics cookies), performance of a contract (for enrolment and programme delivery), and our legitimate interests (for website security and improving our services).

We retain enquiry data for up to 12 months after last contact. Enrolment records are retained for 5 years for legal and financial compliance purposes. Analytics data is retained in aggregate form only.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• Responding to enquiries about our programmes
• Processing enrolments and delivering programme materials
• Sending administrative communications related to enrolled programmes
• Sending programme updates or information about new cohorts, where you have consented
• Improving the quality and content of our website and programmes
• Complying with legal and regulatory obligations under Thai law

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling.

We may share data with service providers who assist us in operating the website or delivering programmes (such as payment processors or email delivery services), under data processing agreements that require them to protect the data.

4. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Encrypted data transmission over HTTPS
• Access to personal data restricted to staff directly involved in programme delivery
• Regular review of access permissions
• Secure storage of enrolment and payment records

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authority as required by applicable law.

5. Cookies

Our website uses cookies to support basic functionality and to understand how the site is used. We use essential cookies (required for the site to function), analytics cookies (to understand visitor behaviour), and preference cookies (to remember your settings). You can manage your cookie preferences through our cookie consent tool. For full details, see our Cookie Policy.

6. Your Rights

Under Thailand's Personal Data Protection Act (PDPA) and applicable principles of data protection law, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your personal data in certain circumstances
• Right to restrict processing — to ask us to limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — to withdraw any consent previously given at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You may also lodge a complaint with Thailand's Personal Data Protection Committee if you believe your data rights have not been upheld.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend that you review their privacy policies before providing any personal data to them.

8. Children's Privacy

Our programmes are designed for adults and are not intended for anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.

9. International Data Transfers

Our primary operations are based in Thailand. Where we use third-party service providers located outside Thailand (for example, cloud storage or email services), we take steps to ensure that data transfers are conducted under appropriate safeguards consistent with applicable data protection law.

10. Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. If we make material changes, we will notify enrolled learners by email. Continued use of our website or services after a change constitutes acceptance of the revised policy.

11. Contact

For any questions about this privacy policy or about how your personal data is handled:

• Email: [email protected]
• Post: Phra Lab, 89 Pridi Banomyong Road, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand
• Phone: +66 84 627 9354