Privacy Policy

1. Introduction

Rungruang ("we", "us", "our") is committed to handling your personal information with care and transparency. This Privacy Policy describes what data we collect, why we collect it, how we use and protect it, and what choices you have.

We operate in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA). By engaging with our website or enrolling in our courses, you acknowledge this policy.

2. Personal Data We Collect

We collect only the information necessary to provide our services and respond to your enquiries.

Information you provide directly

• Full name — when you complete our contact form or enrol in a course
• Email address — for correspondence and course access
• Phone number — if you choose to provide it on our contact form
• Message content — questions or enquiries you send us
• Payment information — processed securely by our payment provider; we do not store card details

Information collected automatically

• Browser type, device type, and operating system
• Pages visited, time spent, and navigation paths (via analytics cookies)
• IP address and approximate geographic region
• Referral source (how you found our website)

Data retention

Enquiry and contact form data is retained for up to 24 months. Enrolment records are kept for 5 years for accounting and legal compliance. Analytics data is retained per the policies of Google Analytics (typically 26 months).

3. How We Use Your Data

We use the information we collect for the following purposes:

• Responding to your enquiries about our courses and programmes
• Processing course enrolments and confirming participation
• Delivering course materials, session links, and supplementary resources
• Sending relevant course updates, schedule changes, or important notices
• Issuing participation records upon course completion
• Improving our website and course content based on aggregated usage patterns
• Meeting our legal and accounting obligations under Thai law

Marketing communications

We may occasionally send information about upcoming courses or related educational content. You can opt out of these communications at any time by replying "unsubscribe" or using the link in any email we send.

We do not

• Sell your personal data to third parties
• Share your data with advertisers for targeting purposes
• Use your data to make automated decisions that significantly affect you

4. Legal Basis for Processing

Under Thailand's PDPA, we rely on the following legal bases:

• Consent — for marketing communications and non-essential cookies, where you have actively agreed
• Contractual necessity — to fulfil course enrolments and deliver the services you have purchased
• Legitimate interests — for website analytics and service improvement, where our interest does not override your rights
• Legal obligation — to comply with Thai accounting, tax, and regulatory requirements

You may withdraw consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

5. Data Protection Measures

We take the security of your information seriously and maintain reasonable technical and organisational safeguards, including:

• HTTPS encryption for all data transmitted through our website
• Secure, access-controlled storage for customer records
• Limited staff access to personal data on a need-to-know basis
• Payment processing handled by PCI-DSS compliant providers
• Regular review of our data handling practices

Data breach notification

In the event of a data breach that affects your rights or freedoms, we will notify affected individuals and the relevant Thai supervisory authority within the timeframes required by the PDPA.

International transfers

Some of our service providers (such as Google Analytics) may process data outside Thailand. Where this occurs, we rely on standard contractual clauses or equivalent safeguards.

6. Cookies

We use cookies to understand how visitors use our website and to remember your preferences. For detailed information about the types of cookies we use and how to manage them, please see our Cookie Policy.

In summary, we use:

• Essential cookies — required for the website to function correctly
• Analytics cookies — to understand visitor behaviour in aggregate (e.g. Google Analytics)
• Marketing cookies — for optional advertising measurement
• Preference cookies — to remember your cookie consent choices

You can manage your cookie preferences at any time via our Cookie Policy page.

7. Third-Party Services

We use a limited number of trusted third-party services to operate our website and deliver courses. These providers may access your data only as necessary to perform their services:

Analytics

Google Analytics — we use this to understand overall website usage patterns. Data is anonymised where possible and governed by Google's privacy policy.

Payment processing

Payments are processed by a third-party provider. We do not receive or store your full card details. Their own privacy and security standards apply to payment data.

Email and communication

We use email service providers to send course materials and correspondence. These providers are contractually bound to handle your data securely.

External links

Our website may contain links to external resources and market data sources. We are not responsible for the privacy practices of those websites and encourage you to review their policies independently.

8. Your Rights

Under Thailand's PDPA, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request corrections to inaccurate or incomplete data
• Right to erasure — request deletion of your data, where no legitimate reason exists to retain it
• Right to data portability — request your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time
• Right to lodge a complaint — with the Office of the Personal Data Protection Committee (PDPC) of Thailand

9. Children's Privacy

Our courses and services are designed for adults aged 18 and over, with a particular focus on learners over 40. We do not knowingly collect personal data from individuals under 18 years of age.

If you believe a minor has provided us with personal data, please contact us at [email protected] and we will remove it promptly.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the "Last updated" date at the top of this page.

For material changes that significantly affect how we handle your data, we will notify enrolled participants by email. Continued use of our website after any update constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your data rights, please reach out: