Privacy Policy

1. Data Controller

The data controller responsible for your personal data is Neuronest, operating from 191 Ratchadaphisek Road, Din Daeng, Din Daeng, Bangkok 10400, Thailand. You can contact us at [email protected] or by phone at +66 2 837 4619.

2. What Data We Collect

We collect the following personal data when you use our website or contact us:

• Contact information: Name, email address, and phone number (when provided through our enquiry form)
• Communication records: Messages you send us and our responses
• Enrolment information: Details you provide when enrolling in a programme
• Technical data: IP address, browser type, pages visited, and session duration collected through website analytics tools
• Cookie data: Preferences stored in your browser as described in our Cookie Policy

We do not collect sensitive personal data such as financial account details, health information, or government identification numbers unless specifically required and separately disclosed.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the PDPA:

• Consent: When you submit our contact form, you consent to us using your data to respond to your enquiry
• Contractual necessity: To deliver programmes you have enrolled in and manage your account
• Legitimate interests: To improve our website and services, and to communicate information relevant to programmes you are enrolled in or have enquired about
• Legal obligation: To comply with applicable Thai law and regulatory requirements

4. How We Use Your Data

• Responding to enquiries you send through our contact form
• Processing enrolments and delivering programme access
• Communicating updates relevant to your enrolled programme
• Sending information about other Neuronest programmes if you have given consent
• Analysing website usage to improve content and navigation
• Complying with legal obligations applicable to our business in Thailand

We do not sell your personal data. We do not use your data for automated decision-making that produces legal or similarly significant effects.

5. Data Sharing

We may share your personal data with the following categories of third parties where necessary:

• Website analytics providers (such as Google Analytics) to understand how our website is used — data shared is aggregated or pseudonymised where possible
• Email and communication service providers used to manage correspondence
• Payment processors used when processing enrolment fees — these processors handle payment data under their own privacy policies and applicable financial regulations
• Legal authorities if required by applicable Thai law or court order

We do not share your data with third parties for their own marketing purposes.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy:

• Enquiry data: retained for up to 12 months from the date of your last communication with us
• Enrolment and programme data: retained for the duration of your enrolment plus 3 years
• Financial records: retained for the period required by Thai tax and accounting law (typically 5 years)
• Website analytics data: retained according to the third-party analytics provider's retention settings

7. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These measures include access controls, encrypted data transmission (HTTPS), and periodic review of our data handling practices.

If we become aware of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals in accordance with the PDPA.

8. Cookies

Our website uses cookies to remember your preferences and to collect anonymised usage data. You can control cookie settings through your browser or via our Cookie Policy page. For full details, please read our Cookie Policy.

9. Your Rights

Under the PDPA, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data where no legal basis remains for its retention
• Right to data portability: Request your data in a structured, commonly used format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent — this does not affect the lawfulness of processing before withdrawal
• Right to lodge a complaint: File a complaint with the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights have been violated

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving your request.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing personal data.

11. Age Requirement

Our programmes are intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected such data, please contact us so we can remove it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy on this page with a revised "Last Updated" date. Continued use of our website or services following such changes constitutes acceptance of the updated policy.