Privacy Policy
At advflo-reboot, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you interact with our departmental budgeting education services.
We operate in compliance with Thailand's Personal Data Protection Act (PDPA) B.E. 2562 (2019) and international privacy standards. If you have questions about anything here, reach out directly—we're here to help clarify.
Information We Collect
Personal Information You Provide
When you sign up for our courses or contact us, we collect information you give us directly:
- Name and contact details (email, phone number)
- Educational background and professional experience
- Payment information for course enrollment
- Learning preferences and course feedback
- Communication history with our support team
Information Collected Automatically
When you visit our website, we automatically gather certain technical data:
- IP address and approximate location
- Browser type and operating system
- Pages visited and time spent on site
- Referring website information
- Device identifiers and mobile network data
Note: We don't collect sensitive personal data such as race, religion, or health information unless you voluntarily provide it for specific accommodation requests.
How We Use Your Information
We use the data we collect for specific purposes related to providing quality education:
- Delivering course content and managing your enrollment
- Processing payments and maintaining transaction records
- Responding to your questions and support requests
- Sending course updates and relevant educational materials
- Improving our curriculum based on student feedback
- Analyzing website usage to enhance user experience
- Complying with legal obligations and preventing fraud
Marketing Communications
We may send you information about new courses or features that might interest you. You can opt out anytime by clicking the unsubscribe link in our emails or contacting us directly. Even if you unsubscribe, we'll still send essential messages about your active courses.
Legal Basis for Processing (PDPA Compliance)
Under Thailand's PDPA, we process your personal data based on these legal grounds:
| Processing Purpose | Legal Basis |
|---|---|
| Course enrollment and delivery | Contract performance |
| Payment processing | Contract performance and legal obligation |
| Marketing communications | Your consent |
| Website analytics | Legitimate interests |
| Customer support | Contract performance and legitimate interests |
| Legal compliance | Legal obligation |
Data Sharing and Disclosure
We don't sell your personal information. However, we share data with trusted partners who help us run our services:
Service Providers
- Payment processors for secure transaction handling
- Cloud hosting providers for data storage
- Email service providers for course communications
- Analytics tools to understand website usage
- Customer support platforms for managing inquiries
These providers can only use your data to perform services for us and must protect it according to our standards.
Legal Requirements
We may disclose your information when required by Thai law, court orders, or government requests. We'll notify you of such requests unless legally prohibited from doing so.
International Transfers: Some of our service providers operate outside Thailand. When we transfer your data internationally, we ensure appropriate safeguards are in place as required by PDPA.
Your Rights Under PDPA
Thai data protection law gives you significant control over your personal information. Here's what you can do:
Access and Portability
You can request a copy of the personal data we hold about you. We'll provide this in a commonly used electronic format within 30 days of your request.
Correction and Updates
If your information is inaccurate or incomplete, you can ask us to correct it. You can often update basic details directly through your account settings.
Deletion Rights
You can request deletion of your personal data in these situations:
- The data is no longer necessary for the purposes we collected it
- You withdraw consent and we have no other legal basis for processing
- You object to processing based on legitimate interests
- The data has been processed unlawfully
- Deletion is required by legal obligation
Objection and Restriction
You can object to processing based on legitimate interests or for direct marketing purposes. You can also request we restrict processing while we resolve disputes about accuracy or lawfulness.
How to Exercise Your Rights
Send requests to [email protected] with your name and account details. We'll respond within 30 days. Some requests may require identity verification to protect your data security.
Data Security Measures
We protect your information using industry-standard security practices:
- SSL/TLS encryption for data transmission
- Encrypted storage of sensitive information
- Regular security audits and vulnerability assessments
- Access controls limiting who can view your data
- Employee training on data protection practices
- Secure backup systems with encryption
- Incident response procedures for security breaches
While we take reasonable precautions, no internet transmission is completely secure. We encourage you to use strong passwords and keep your login credentials confidential.
Security Breach Notification: If a data breach affects your personal information, we'll notify you and relevant authorities within 72 hours as required by PDPA.
Data Retention
We keep your personal information only as long as necessary:
| Data Type | Retention Period |
|---|---|
| Active student records | Duration of enrollment plus 2 years |
| Course completion certificates | 10 years from completion date |
| Payment transaction records | 7 years (tax compliance requirement) |
| Marketing communications data | Until you unsubscribe or 3 years of inactivity |
| Website analytics data | 26 months |
| Support communication history | 3 years from last contact |
After retention periods expire, we securely delete or anonymize your data. Some information may be retained longer if required by law or for legitimate legal purposes.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve your experience. Here's what we use:
Essential Cookies
These are necessary for the website to function. They enable basic features like page navigation and access to secure areas. The website won't work properly without them.
Analytics Cookies
We use these to understand how visitors interact with our site—which pages are popular, where people spend time, and where they encounter problems. This helps us improve the overall experience.
Preference Cookies
These remember your choices (like language preferences or username) to provide a more personalized experience.
You can control cookies through your browser settings. Keep in mind that disabling certain cookies may affect website functionality. Most browsers accept cookies automatically, but you can modify settings to decline them if you prefer.
Third-Party Links
Our website may contain links to external sites for additional resources or reference materials. We're not responsible for the privacy practices of these third-party websites.
When you click a link leaving our site, we recommend reviewing the privacy policy of the destination website. Their data collection and usage practices may differ from ours.
Children's Privacy
Our services are designed for adult learners aged 18 and above. We don't knowingly collect personal information from individuals under 18 years old.
If we discover we've accidentally collected data from someone under 18, we'll delete it promptly. If you believe we've collected information from a minor, please contact us immediately at [email protected].
Changes to This Policy
We may update this privacy policy to reflect changes in our practices or for legal reasons. When we make significant changes, we'll notify you through:
- Email notification to your registered address
- Prominent notice on our website homepage
- In-app notification if you're an active student
The "Last Updated" date at the top of this policy shows when changes were made. We encourage you to review this policy periodically to stay informed about how we protect your information.
Continued use of our services after policy changes means you accept the updated terms. If you disagree with changes, you can close your account and stop using our services.
Questions or Concerns?
If you have questions about this privacy policy or how we handle your data, we're here to help. Contact us through any of these channels:
We aim to respond to all privacy-related inquiries within 3 business days. For urgent matters regarding data breaches or security concerns, please mark your message as "Urgent - Privacy Matter" in the subject line.