Information We Collect
Registration and Account Data
When you sign up for our courses or create an account, we collect basic identification details. This includes your full name, email address, phone number, and sometimes your billing address if you're enrolling in paid programs. We also track your chosen username and password (encrypted, of course).
Learning Progress Information
As you move through our budgeting courses, we monitor your progress. We record which modules you've completed, quiz scores, assignment submissions, and time spent on different sections. This helps us personalize your experience and suggest relevant resources.
Communication Records
If you contact our support team or instructors, we keep those conversations. Whether it's an email question about course content or a chat message about technical issues, we store these exchanges to provide better assistance and improve our services.
We never sell your personal information to third parties. Your data is used solely to deliver and improve your educational experience with us.
Technical Usage Data
Like most websites, we automatically collect technical information when you visit. This includes your IP address, browser type, device information, pages viewed, and timestamps. We use this to analyze how people use our platform and identify technical problems.
How We Use Your Information
Your data serves specific purposes, and we're selective about what we do with it. Here's where your information actually goes:
- Course Delivery: We use your account details to grant access to materials, track your progress, and issue completion certificates when you finish programs.
- Personalized Recommendations: Based on your learning patterns and completed modules, we suggest relevant courses or resources that match your interests in financial management.
- Communication: We send course updates, important announcements, and occasionally educational content related to budgeting topics. You can opt out of non-essential emails anytime.
- Payment Processing: When you purchase a course, we share necessary billing information with payment processors to complete the transaction securely.
- Platform Improvement: We analyze usage patterns to identify confusing sections, popular topics, and technical issues that need fixing.
- Legal Compliance: Sometimes we're required to maintain records for tax purposes or respond to valid legal requests from Thai authorities.
We don't use your data for purposes beyond what's listed here without getting your explicit permission first. If our usage practices change significantly, we'll notify you and give you the option to review or delete your account.
Data Storage and Security
Where Your Data Lives
We store your information on secure servers located in Thailand and occasionally use cloud services with data centers in Southeast Asia. This keeps access speeds fast for our local users while maintaining compliance with Thai data residency requirements.
Security Measures We Take
Your data sits behind multiple layers of protection. We use industry-standard encryption for data transmission and storage. Access to personal information is restricted to employees who need it for their jobs, and all staff sign confidentiality agreements.
| Security Layer | Protection Method |
|---|---|
| Data Transmission | SSL/TLS encryption for all connections |
| Password Storage | Bcrypt hashing with salt |
| Database Access | Role-based permissions and audit logs |
| Payment Information | Handled by PCI-compliant processors |
We regularly update our security protocols and conduct vulnerability assessments. But let's be honest about something important: no system is completely impenetrable. While we implement strong safeguards, we can't guarantee absolute security. That's why we also recommend you use strong, unique passwords and enable two-factor authentication where available.
If we detect a data breach that affects your information, we'll notify you within 72 hours as required by Thailand's PDPA and explain what happened and what steps we're taking.
Sharing and Third Parties
We share your information only when necessary and with parties who have legitimate reasons to access it. Here's the complete list:
Service Providers
We work with companies that help us operate the platform. This includes email service providers for course communications, payment processors for transactions, and hosting companies for server infrastructure. These partners can only use your data to perform services for us and are bound by confidentiality agreements.
Educational Partners
Some courses feature guest instructors or collaborative content with other educational organizations. When relevant, we may share limited information (like your name and course enrollment status) with these partners so they can provide you with their portion of the instruction.
Legal Requirements
We disclose information when required by Thai law, court orders, or valid government requests. We may also share data if we believe it's necessary to prevent fraud, protect our legal rights, or ensure the safety of our users and staff.
Business Transfers
If GrowthXAdvance merges with another company or sells assets, your information might be transferred as part of that transaction. You'd be notified beforehand and given options about how your data is handled going forward.
We don't share your data with advertisers, marketing companies, or data brokers. Your learning information stays within our educational ecosystem.
Your Privacy Rights
Under Thailand's Personal Data Protection Act, you have specific rights regarding your personal information. We take these seriously and have procedures to help you exercise them.
Access Your Data
Request a copy of all personal information we hold about you. We'll provide it in a readable format within 30 days.
Correct Inaccuracies
Update or fix incorrect information in your account. You can do most corrections yourself through your profile settings.
Delete Your Account
Request complete deletion of your account and associated data. We'll remove everything except what we're legally required to keep.
Portable Data
Receive your data in a structured, machine-readable format that you can transfer to another service provider.
Restrict Processing
Limit how we use your information while maintaining your account. Useful if you're disputing data accuracy or questioning usage.
Object to Processing
Disagree with how we're using your data for specific purposes, particularly for marketing or analytics.
How to Exercise Your Rights
To make any of these requests, email us at [email protected] with "Privacy Rights Request" in the subject line. Include your full name, account email, and specific action you want us to take. We'll verify your identity (usually by sending a confirmation to your registered email) and process the request within 30 days.
If you're not satisfied with how we handle your request, you have the right to file a complaint with Thailand's Personal Data Protection Committee. We'd prefer to resolve concerns directly, but that option is always available.
Cookies and Tracking
Our website uses cookies and similar technologies to function properly and improve your experience. Let's break down what we're actually tracking and why.
Essential Cookies
These keep the site working. They remember your login status, maintain your session as you navigate between pages, and store your language preferences. You can't disable these without breaking basic functionality.
Analytics Cookies
We use analytics tools to understand how people use our platform. This tells us which pages get the most traffic, where users get stuck, and how long people typically spend on different sections. The data is aggregated and anonymous—we're looking at patterns, not tracking individuals.
Preference Cookies
These remember your choices to make return visits smoother. Things like your preferred video playback quality, display settings, or which modules you've collapsed or expanded get stored locally.
You can manage cookie preferences through your browser settings. Most browsers let you block or delete cookies, though this might affect how the site works. We don't use advertising cookies or share cookie data with third-party ad networks.
Data Retention
We don't keep your information forever. How long we retain different types of data depends on legal requirements and legitimate business needs.
Active Account Data
While your account is active, we maintain all your information to provide ongoing service. Your course progress, saved materials, and account details stay accessible as long as you're using the platform.
After Account Closure
When you delete your account, we remove most personal information within 30 days. However, we retain certain records for legal or administrative purposes—typically enrollment records, payment history, and communications with support. These are kept for seven years as required by Thai tax and business record laws.
Marketing Communications
If you unsubscribe from our email list, we keep your email address in a suppression list to make sure we don't accidentally add you back. This list is maintained indefinitely but only used to prevent unwanted emails.
Inactive accounts (no login for three years) may be archived or deleted after we send notification to your registered email. We'll give you 60 days to respond if you want to keep the account active.
Children's Privacy
Our services are designed for adults interested in personal finance education. We don't knowingly collect information from anyone under 18 years old without parental consent.
If you're under 18 and want to use our courses, we require a parent or guardian to create the account and oversee your participation. The adult account holder is responsible for managing privacy settings and data access.
If we discover we've collected information from someone under 18 without proper consent, we'll delete that data promptly. Parents who believe we might have information about their child can contact us to request removal.
International Transfers
Your data is primarily stored and processed in Thailand. However, some of our service providers operate servers in other countries within Southeast Asia and occasionally in other regions with strong data protection standards.
When we transfer data internationally, we ensure adequate protections through contractual agreements that require recipients to maintain security standards equivalent to what Thailand's PDPA mandates. These agreements include provisions for data subject rights and breach notification procedures.
If you access our services while traveling outside Thailand, your data may be transmitted across international borders as part of normal internet routing. We use encryption to protect this data in transit regardless of where you're connecting from.
Changes to This Policy
Privacy regulations evolve, and so do our services. We update this policy periodically to reflect changes in how we operate or to comply with new legal requirements.
When we make significant changes—like adding new types of data collection or changing how we share information—we'll notify you by email and display a prominent notice on the website. You'll have at least 30 days to review changes before they take effect.
Minor updates like clarifying existing practices or fixing typos don't trigger notifications, but we'll update the "Last Updated" date at the top of this page. We encourage you to review this policy occasionally, especially before sharing new information with us.
If you disagree with updated terms, you can close your account before they take effect. We'll process your data according to the policy version you originally agreed to up until that point.
Contact and Complaints
Questions about this policy or concerns about how we handle your data? We're here to help explain or address issues.
The quickest way to reach us is by email at [email protected]. Include enough detail so we can understand and respond to your specific concern. We aim to reply to privacy inquiries within 48 hours during business days.
For formal complaints or data subject access requests, you can also write to us at: GrowthXAdvance, Sangsri Rd, Hat Yai, Hat Yai District, Songkhla 90110, Thailand. Mark the envelope "Privacy Team" to ensure it reaches the right department quickly.
If you believe we've violated your privacy rights under Thai law, you can file a complaint with the Personal Data Protection Committee. Their contact information is available through Thailand's Ministry of Digital Economy and Society website. We take all complaints seriously and will work with regulators to address any substantiated concerns.