Privacy Policy
Last Updated: 14 March 2026 | Effective: 14 March 2026
Boonchai is committed to handling your personal information with care and transparency. This policy explains what data we collect, why we collect it, how it is used, and what rights you have under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
1. Data Controller
The data controller responsible for your personal information is:
Business Name: Boonchai
Address: 64 Ari Soi 1, Phaya Thai, Bangkok 10400, Thailand
Phone: +66 84-672-9315
Email: [email protected]
2. Personal Data We Collect
We collect only the information needed to provide our courses and communicate with you effectively:
- Contact details: Full name, email address, and phone number provided when you submit our enquiry form or enrol in a course.
- Course participation data: Which courses you have attended, session attendance records, and workshop submissions.
- Payment information: Transaction references and payment status. Full card details are processed by our payment provider and are not stored by us.
- Website usage data: Pages visited, time spent, and general browser information collected via analytics cookies, subject to your consent.
- Communications: Any messages, questions, or feedback you send to us by email or telephone.
3. Legal Basis for Processing
Under Thailand's PDPA, we rely on the following legal bases:
Contractual necessity
Processing your name, email, and payment data to enrol you in a course and deliver the service you have requested.
Legitimate interest
Sending course-related communications, responding to enquiries, and improving our teaching materials.
Consent
Using analytics or marketing cookies on our website, and sending optional newsletters or updates about new courses — where you have clearly opted in.
Legal obligation
Retaining financial records as required by Thai tax and accounting regulations.
4. How We Use Your Information
- Processing course enrolment and confirming your place
- Sending session schedules, materials, and updates relevant to your enrolled course
- Responding to your enquiries and support requests
- Issuing records of course participation upon completion
- Processing refunds or cancellations in accordance with our terms
- Analysing website usage to improve the quality of our online content (with your cookie consent)
- Sending information about upcoming courses or resources, only where you have given consent to receive these
5. How Long We Keep Your Data
We keep your data only for as long as reasonably necessary:
- Enquiry data — up to 12 months from the date of your last enquiry if no enrolment follows
- Course participation records — up to 5 years from course completion, to support any future queries about your participation
- Financial transaction records — up to 7 years as required under Thai accounting and revenue laws
- Analytics data — aggregated and typically anonymised after 26 months
6. Sharing Your Information
We do not sell your personal data to any third party. We share information only in the following circumstances:
- Payment processors: To process course fees securely. These providers are bound by contractual data protection obligations.
- Website analytics: Aggregated, anonymised data may be processed by tools such as Google Analytics, subject to your cookie preferences.
- Legal authorities: Where required by law, court order, or regulatory obligation under Thai law.
- Course instructors: Names and attendance data shared internally with our instructors to support session delivery and post-course mentoring access.
7. Data Security
We apply appropriate technical and organisational measures to protect your personal information from accidental loss, unauthorised access, or disclosure:
- TLS encryption for data transmitted between your browser and our website
- Restricted internal access — only staff with a clear need can view personal records
- Secure payment processing handled by PCI-DSS compliant providers
- Regular review of our data handling practices
If we become aware of a data breach that is likely to affect your rights, we will notify you and the relevant Thai authority without undue delay, as required under the PDPA.
8. Cookies
Our website uses cookies to support essential functions and, with your consent, to understand how visitors use our content. Essential cookies cannot be disabled as they are required for the site to operate. Optional cookies — including analytics and marketing cookies — are activated only when you give your consent through our cookie banner.
For full details and to manage your preferences, please see our Cookie Policy.
9. Your Rights Under the PDPA
As a data subject under Thailand's Personal Data Protection Act, you have the following rights:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete information.
Right to Erasure
Request deletion of your personal data where we have no overriding legal obligation to retain it.
Right to Object
Object to processing based on legitimate interest, including direct marketing.
Right to Portability
Receive your data in a structured, machine-readable format where technically feasible.
Right to Withdraw Consent
Withdraw consent at any time for processing based solely on consent, without affecting prior processing.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand if you believe your data has been mishandled.
10. Links to Third-Party Websites
Our website may include links to external resources — such as the Stock Exchange of Thailand (SET) website or research tools — for informational purposes. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently before sharing any personal information with them.
11. Children's Privacy
Our courses are designed for adults and are not directed at anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted information to us, please contact us at [email protected] and we will promptly delete it.
12. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make meaningful changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify enrolled participants by email. Continued use of our website or services after any update constitutes acknowledgement of the revised policy.
Privacy Enquiries
If you have any questions about this policy, wish to exercise your rights, or have a concern about how your data has been handled, please reach out: