Legal
Privacy Policy
Last Updated: 28 May 2025 · Witthaya Labs, Bangkok, Thailand
Witthaya Labs ("we", "us", "our") is committed to handling personal information carefully and transparently. This policy explains what data we collect when you interact with our website or enrol in one of our courses, how we use it, and what rights you have in relation to it.
If you have questions about anything in this policy, please write to [email protected].
1. Who We Are
Witthaya Labs is an online school for AI development, registered and operating from 271/4 Sukhumvit Soi 63, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand. We are the data controller for personal information collected through this website and through our course enrolment processes.
2. What Personal Data We Collect
We collect personal data when you:
- Submit the contact or enquiry form on our website (name, email address, phone number if provided, and message content)
- Enrol in one of our courses (name, email address, payment information processed by our payment provider)
- Communicate with a mentor or staff member by email or messaging
- Visit our website, where certain technical data is collected automatically (IP address, browser type, pages visited, time of visit)
We do not collect sensitive categories of personal data (such as health information, political views, or biometric data).
3. Legal Basis for Processing
We process personal data on the following bases under the Thailand Personal Data Protection Act (PDPA) B.E. 2562:
- Performance of a contract: to deliver course materials, provide mentor support, and communicate about your enrolment
- Legitimate interests: to improve our courses and website based on how they are used, and to respond to enquiries
- Consent: for marketing communications, where you have opted in
- Legal obligation: where we are required to retain or disclose information by law
4. How We Use Personal Data
- To respond to enquiries and manage the enrolment process
- To deliver course materials and schedule mentor sessions
- To send administrative communications about your course (schedule changes, reminders, updates)
- To send occasional information about new courses or relevant content, where you have consented
- To understand how our website is used and improve its structure
- To comply with applicable legal obligations
5. Data Retention
We retain personal data for as long as necessary for the purposes described here. Specifically:
- Enquiry form data: up to 12 months if enrolment does not proceed
- Learner records: up to 5 years following course completion, for administrative and legal purposes
- Website analytics data: up to 26 months
- Financial transaction records: up to 7 years as required by Thai tax law
6. Sharing of Personal Data
We do not sell personal data. We may share it with:
- Payment processors, to handle course fees securely (these processors operate under their own privacy policies)
- Analytics service providers, such as Google Analytics, on an anonymised or pseudonymised basis
- Regulatory or government authorities, where required by law
We do not share personal data with third parties for their own marketing purposes.
7. Data Protection Measures
Personal data is stored on secured servers with restricted access. Connections to our website use HTTPS encryption. Access to personal data within our team is limited to those who need it to perform their role. In the event of a data breach that affects your rights, we will notify you and any relevant regulatory authority within the timeframes required by the PDPA.
8. Cookies
Our website uses cookies to support functionality and understand how visitors use the site. You can manage cookie preferences using the consent tool presented when you first visit. For full details, see our Cookie Policy.
9. Your Rights
Under the Thailand PDPA and, where applicable, international data protection principles, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Object to processing based on legitimate interests
- Withdraw consent for processing based on consent
- Request restriction of processing in certain circumstances
- Receive your data in a portable format
- Lodge a complaint with the relevant supervisory authority (in Thailand: the Personal Data Protection Committee)
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
10. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
11. Children's Privacy
Our courses are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have received data from a minor, please contact us at [email protected] and we will take prompt steps to delete it.
12. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If changes are significant, we will notify enrolled learners by email. Continued use of our website or services after an update constitutes acceptance of the revised policy.
13. Contact
For privacy-related questions or to exercise your rights:
- Email: [email protected]
- Address: 271/4 Sukhumvit Soi 63, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand
- Phone: +66 2 384 9617