Privacy Policy

1. Introduction

Samong Lab ("we", "us", "our") is committed to handling personal data with care and transparency. This policy explains what information we collect from learners, enquirers, and website visitors, why we collect it, and how it is protected.

This policy applies to all personal data processed in connection with the Samong Lab website and online courses. It is governed by the Personal Data Protection Act B.E. 2562 (2019) of Thailand (PDPA). Questions about this policy can be directed to [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Enrolment and enquiry forms: name, email address, and optionally phone number and course of interest
• Course administration: assignment submissions, attendance records, and completion status
• Website analytics: anonymised page visit data, browser type, and session duration (via analytics cookies, where consented)
• Payment processing: transaction reference numbers (we do not store card details directly)

Legal basis: processing is based on contract performance (enrolment), legitimate interest (website improvement), and consent (marketing communications and analytics cookies).

Retention: enquiry data is held for 12 months. Enrolment and course completion records are held for 3 years after course completion. You may request earlier deletion at any time.

3. How We Use Your Data

• Responding to course enquiries and confirming enrolment
• Delivering course materials, assignments, and mentor sessions
• Issuing completion certificates
• Sending cohort updates and administrative communications
• Improving the website and course content through aggregated analytics
• Compliance with applicable Thai law

We do not sell personal data to third parties. We do not use your data for advertising purposes beyond informing you of Samong Lab courses you have enquired about or enrolled in, unless you have separately opted in to marketing updates.

4. Data Sharing

We may share data with:

• Payment processors: for transaction completion only, under contractual data protection terms
• Analytics providers: anonymised usage data only, where you have consented to analytics cookies
• Hosting and infrastructure providers: under data processing agreements
• Legal authorities: where required by Thai law

5. Data Security

We take the following steps to protect personal data:

• HTTPS encryption across all web properties
• Access to personal data restricted to staff who require it for their role
• Regular review of access controls and stored data
• Notification to affected individuals and relevant authorities in the event of a data breach, as required under PDPA

6. Cookies

We use essential cookies for the website to function correctly, and optional analytics and preference cookies with your consent. You can manage your cookie preferences at any time via our Cookie Policy page.

7. Your Rights

Under the Thai PDPA, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate or incomplete data
• Erasure: request deletion of your data where no legal basis requires us to retain it
• Restriction: ask us to limit how we use your data in certain circumstances
• Data portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interest
• Withdraw consent: at any time for processing based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Committee of Thailand.

8. Third-Party Links

Our website may contain links to external resources and tools. We are not responsible for the privacy practices of third-party websites. We recommend reviewing their privacy policies before submitting personal data.

9. Children's Privacy

Our courses and website are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have received data from a minor, please contact us promptly and we will arrange deletion.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email to active learners and by a notice on this page. Continued use of the website after changes become effective constitutes acceptance of the updated policy.