Privacy Policy

What Information We Collect

Information You Give Us Directly

When you sign up for courses or reach out to us, you share:

• Your name and email address
• Phone number if you provide it
• Payment information when enrolling in paid courses
• Course progress and assignment submissions
• Questions you ask our instructors

Technical Information We Collect Automatically

Like most websites, we gather some technical data when you visit:

• Your IP address and general location (city level)
• Browser type and device information
• Pages you visit and time spent on them
• How you found our site (search engine, direct link, etc.)

We use this to understand what's working on our site and what's confusing people. If everyone bounces off a particular page within seconds, that tells us something needs fixing.

How We Use Your Information

Here's what we actually do with your data:

We won't sell your information to third parties. That's not our business model, and frankly, we'd find it pretty creepy if someone did that to us.

Sharing Your Information

Sometimes we need to share limited information with service providers who help us run the platform:

Payment Processors

When you pay for a course, your payment details go through secure payment gateways. We never see or store your full credit card numbers. The payment processor handles that part and just tells us whether the payment went through.

Email Service

We use email service providers to send course materials and updates. They have access to your email address and name, but they're contractually prohibited from using it for anything except delivering our messages.

Analytics Tools

We use analytics software to understand how people use our site. This data is anonymized, so it shows us patterns rather than tracking individual users.

Your Rights Under Thai Law

Thailand's Personal Data Protection Act gives you specific rights. Here's what you can do and how to actually do it:

Access Your Data

You can request a copy of all personal information we hold about you. Email us at help@smartintellinet.com with "Data Access Request" in the subject line. We'll send you a complete file within 30 days. There's no fee for this unless you make repeated requests, in which case we might charge a reasonable administrative fee.

Correct Inaccurate Information

If your email address changed or we spelled your name wrong, just let us know. You can update most information yourself through your account settings, or contact us directly for help.

Delete Your Account

You can request full account deletion at any time. We'll remove all your personal data within 30 days, except for information we're legally required to keep for tax purposes (which we store separately and securely for seven years per Thai law).

Object to Processing

If you don't want us using your data for a specific purpose, you can object. For example, if we send occasional updates about new courses and you'd rather not receive them, you can unsubscribe. Some processing is necessary for course delivery, so we can't stop that while you're actively enrolled.

Data Portability

You can request your data in a common format (like CSV or JSON) that you can transfer to another service. This includes your course progress, assignments, and account information.

How We Protect Your Information

Security isn't just about fancy technology. It's about thinking through what could go wrong and preventing it.

Technical Measures

• All data transmissions use SSL/TLS encryption (that's the padlock you see in your browser)
• Passwords are hashed using bcrypt, which means even we can't see your actual password
• Our servers are located in secure data centers with restricted physical access
• We run regular security audits and update software promptly when vulnerabilities are discovered
• Database access is limited to essential personnel only

Organizational Measures

• Staff members sign confidentiality agreements
• We provide regular security training to our team
• Access to personal data is logged and monitored
• We have an incident response plan ready in case something does go wrong

No system is perfectly secure. If we experience a data breach that affects your personal information, we'll notify you within 72 hours and explain what happened, what data was affected, and what steps we're taking.

Cookies and Tracking

We use cookies, but let's be specific about what that actually means.

Essential Cookies

These keep you logged in and remember your preferences. Without them, you'd have to log in every time you clicked to a new page. These are necessary for the site to function, so they're not optional.

Analytics Cookies

These help us understand which pages are useful and which need improvement. The data is anonymized. We use these only if you consent.

What We Don't Use

We don't use advertising cookies or share your browsing data with advertising networks. We're not in the ad business.

Data Retention

We don't keep your data forever. Here's our retention schedule:

• Active account data: Kept while your account is open and for 12 months after last activity
• Course materials and progress: Kept for 24 months after course completion so you can reference them
• Payment records: Kept for seven years to comply with Thai tax law
• Support correspondence: Kept for 18 months to maintain service quality
• Marketing consent records: Kept while consent is active and for three years after withdrawal

After these periods, we permanently delete the data. Deletion means actual deletion, not just archiving.

International Data Transfers

Our servers are primarily located in Thailand. Some service providers we work with (like email services) might process data in other countries. When this happens, we ensure these providers meet adequate data protection standards through:

• Contractual clauses requiring equivalent protection to Thai law
• Verification that the receiving country has adequate data protection laws
• Regular audits of third-party security practices

If you're accessing our platform from outside Thailand, your data will be transferred to and processed in Thailand according to this policy.

Children's Privacy

Our courses are designed for adults. We don't knowingly collect information from anyone under 18 without parental consent. If you're under 18 and want to enroll, we need written permission from a parent or guardian.

If we discover we've accidentally collected data from a minor without proper consent, we'll delete it immediately.

Changes to This Policy

We update this policy occasionally as our practices evolve or laws change. When we make significant changes, we'll email active users and post a notice on the site for 30 days.

Minor updates (like clarifying existing practices or fixing typos) won't trigger notifications, but we'll always note the revision date at the top of this page.

Continuing to use the platform after changes take effect means you accept the updated policy. If you disagree with changes, you can close your account before they take effect.

Legal Basis for Processing

Under Thai law, we need a legal basis to process your personal data. Here's what applies:

• Contract Performance: Processing necessary to deliver courses you've enrolled in
• Legal Obligation: Processing required by Thai tax and business laws
• Consent: Processing for marketing communications (you can withdraw anytime)
• Legitimate Interest: Processing for platform improvement and fraud prevention

Filing a Complaint

If you believe we've mishandled your personal data, please contact us first so we can address it. If you're not satisfied with our response, you have the right to file a complaint with Thailand's Personal Data Protection Committee.

You can reach the committee through the Office of the Personal Data Protection Committee, Ministry of Digital Economy and Society, Bangkok, Thailand.