LEGAL
Privacy Policy
Last Updated: 1 July 2025 | Rianroo, 55 Thanon Phaya Thai, Ratchathewi, Bangkok 10400, Thailand
Rianroo is committed to handling your personal information with care and transparency. This policy explains what data we collect when you use our website or enrol in our courses, why we collect it, how it is stored, and what rights you have under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and related legislation.
If you have questions about this policy, please contact us at [email protected].
1. Who We Are
The data controller for the purposes of this policy is:
- Business name: Rianroo
- Address: 55 Thanon Phaya Thai, Ratchathewi, Bangkok 10400, Thailand
- Privacy contact: [email protected]
- Phone: +66 2 649 3175
2. Data We Collect
Information you provide directly
- Full name and email address (required when submitting the contact form)
- Phone number (optional, if included in the contact form)
- Message content submitted through the contact form
- Course enrolment details following agreement to enrol
Information collected automatically
- Cookie preference choices stored in your browser's local storage
- Basic analytics data (page visits, session duration) if analytics cookies are accepted
- Standard server log data (IP address, browser type, referrer URL)
Legal basis for processing
- Consent: for optional analytics and marketing cookies, and for marketing communications
- Contractual necessity: to administer your enrolment and deliver course access
- Legitimate interests: to maintain website security, respond to enquiries, and improve our materials
Retention periods
- Contact form submissions: retained for up to 24 months, then deleted unless an active enrolment or legal obligation exists
- Enrolment records: retained for 5 years following completion to satisfy tax and record-keeping requirements
- Analytics data: retained in aggregated, anonymised form; individual session data not stored beyond 14 months
3. How We Use Your Data
- To respond to enquiries and communicate about courses
- To process and administer course enrolments
- To issue completion records where applicable
- To improve our website and course materials based on usage patterns
- To comply with legal and financial record-keeping obligations
We do not sell personal data. We do not share it with third parties for advertising or profiling purposes. We may share data with service providers (hosting, email delivery) under data processing agreements that restrict their use of the data to the services they provide for us.
4. Data Security
- Data is transmitted over HTTPS encrypted connections
- Access to personal data is restricted to authorised staff with a legitimate need
- We review access controls and data handling practices at regular intervals
- In the event of a data breach that poses a risk to individuals, we will notify the relevant supervisory authority within 72 hours and affected individuals where required
5. Cookies
We use essential cookies required for the website to function, and optional analytics and preference cookies subject to your consent. Full details are available in our Cookie Policy. You can manage your preferences at any time via that page.
6. Your Rights
Under the PDPA and applicable law, you have the following rights in relation to your personal data:
- Access: to request a copy of personal data we hold about you
- Rectification: to request correction of inaccurate or incomplete data
- Erasure: to request deletion of your data, subject to legal retention requirements
- Data portability: to receive your data in a structured, machine-readable format where technically feasible
- Objection: to object to processing based on legitimate interests
- Withdrawal of consent: to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing
- Complaint: to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand if you believe your rights have been infringed
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
7. Third-Party Links
Our website may contain links to external websites for reference purposes. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.
8. Children's Privacy
Our courses are intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you become aware that a minor has submitted information to us, please contact us at [email protected] and we will delete it promptly.
9. International Transfers
Our primary data processing occurs within Thailand. Where we use service providers based outside Thailand (for example, cloud hosting services), we take steps to ensure appropriate safeguards are in place in line with PDPA requirements.
10. Changes to This Policy
We may update this policy from time to time. The date at the top of this page reflects when it was last revised. If changes are material, we will inform enrolled learners by email. Continued use of our services following a policy update constitutes acceptance of the revised policy.
11. Contact
For any data-related enquiries or to exercise your rights:
- Email: [email protected]
- Post: Rianroo, 55 Thanon Phaya Thai, Ratchathewi, Bangkok 10400, Thailand
- Phone: +66 2 649 3175 (Mon–Fri 9:00–18:00)