Legal
Privacy Policy
Last updated: 12 May 2025 · Effective: 12 May 2025
kinnarix AI ("we", "our", or "the school") is committed to handling personal data with care and transparency. This policy explains what information we collect from people who enquire about or enrol in our programmes, how we use it, and what rights you have under Thai data protection law and other applicable frameworks.
1. Who we are
kinnarix AI operates as an online school based at 219 Ratchayothin Road, Lat Yao, Chatuchak, Bangkok 10900, Thailand. For data enquiries, please contact us at [email protected].
2. Information we collect
We collect personal information through the following means:
- Enquiry forms — name, email address, and optionally a phone number and message. This is the primary way we receive contact from prospective learners.
- Enrolment — name, email address, payment details (processed by our payment provider, not stored by us), and programme selection.
- Course use — progress through recorded sessions and submission of reflection prompts. Prompt content is used only by the relevant instructor for feedback purposes.
- Cookies and analytics — we use cookies to understand how the website is used. Please see our Cookie Policy for details.
We do not collect sensitive personal data (such as health, financial history, or identification documents) in the ordinary course of enrolment.
3. Legal basis for processing
- Consent — for marketing communications and optional cookie categories
- Contract — to fulfil enrolment obligations and deliver course content
- Legitimate interest — to respond to enquiries and improve our courses
- Legal obligation — where Thai law requires us to retain certain records
4. How we use your information
- To respond to your enquiries about programmes
- To process enrolment and provide access to course materials
- To send course-related communications (schedule changes, new cohort dates)
- To provide instructor feedback on reflection prompts
- To improve curriculum based on aggregated learner feedback
- To comply with financial and legal record-keeping obligations
We do not use your personal data to make automated decisions that have legal or similarly significant effects on you.
5. Data sharing
We do not sell personal data. We share information only with:
- Payment processors — to handle enrolment fees securely. They operate under their own data protection terms.
- Email delivery services — to send course communications. These providers are contractually required to protect your data.
- Authorities — if required by Thai law or a valid legal request.
6. Data retention
- Enquiry data: retained for 12 months, or until you request deletion
- Enrolment and course records: retained for 5 years for legal and financial compliance purposes
- Marketing consent records: retained until consent is withdrawn
7. Cookies
We use essential, analytics, and preference cookies. You can manage your preferences at any time on our Cookie Policy page. Essential cookies cannot be disabled as they are required for the site to function.
8. Your rights
Under the Personal Data Protection Act B.E. 2562 (PDPA) and other applicable frameworks, you have the right to:
- Access personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Object to or restrict processing in certain circumstances
- Withdraw consent where processing is based on consent
- Request a portable copy of your data
- Lodge a complaint with the Office of the Personal Data Protection Committee (Thailand)
To exercise any of these rights, please contact [email protected]. We aim to respond within 30 days.
9. Data security
We use standard security measures including encrypted connections (HTTPS), access controls, and secure storage. In the event of a data breach that presents a meaningful risk to affected individuals, we will notify those individuals and the relevant authority as required by Thai law.
10. International transfers
Our primary operations are based in Thailand. Some service providers (email delivery, analytics) may process data in other countries. Where this occurs, we use providers who maintain adequate data protection standards.
11. Third-party links
Our website may link to external resources (research papers, documentation). We are not responsible for the privacy practices of those sites.
12. Children
Our programmes are intended for learners aged 18 and over. We do not knowingly collect personal data from people under 18. If you believe a minor has submitted data to us, please contact us and we will remove it promptly.
13. Changes to this policy
If we make significant changes to this policy, we will notify enrolled learners by email and update the "Last updated" date at the top of this page. Continued use of our services following notification of changes constitutes acceptance of the revised policy.
14. Contact
For any questions about this policy or about how we handle your personal data, please write to [email protected] or by post to kinnarix AI, 219 Ratchayothin Road, Lat Yao, Chatuchak, Bangkok 10900, Thailand.