Privacy Policy

1. Introduction

Gradient ("we", "us", "our") is an online school for AI development operating in Bangkok, Thailand. We are committed to handling your personal information with care. This policy explains what data we collect, why we collect it, how it is used, and what rights you have in relation to it.

This policy applies to all personal data collected through our website at gradientl.sbs, including contact forms, course enquiries, and cookie usage. If you have questions, contact us at [email protected].

2. Data We Collect

When you interact with our website or courses, we may collect:

• Contact information: name, email address, and phone number when submitted via our contact form.
• Course enquiry details: any information you choose to share in your message about your background or interest.
• Technical data: IP address, browser type, pages visited, and session duration collected through analytics tools.
• Cookie data: preferences and consent stored in your browser's local storage (see Section 6).

We do not collect payment card data directly; any payment processing is handled by third-party providers subject to their own security standards.

3. Legal Basis for Processing

We process your data under the following legal bases:

• Contract: to respond to enquiries and deliver courses you have enrolled in.
• Legitimate interest: to understand how our website is used so we can improve it.
• Consent: for optional analytics and marketing cookies, which you can accept or decline.

Thailand's Personal Data Protection Act B.E. 2562 (PDPA) governs our data handling obligations for users based in Thailand. We operate in compliance with the PDPA and apply comparable care to all users regardless of location.

4. How We Use Your Data

• To respond to your course enquiries and provide course access.
• To send course-related communications (updates, feedback, schedule information).
• To improve website content and course structure based on aggregate usage data.
• To meet any legal obligations we are subject to under Thai law.

We do not sell, rent, or trade your personal data with third parties for their marketing purposes.

5. Data Sharing

We share data only where necessary:

• Course platform providers: who host and deliver course content on our behalf, bound by data processing agreements.
• Analytics services: aggregate, anonymised usage data to understand site performance (e.g. Google Analytics, if enabled via cookie consent).
• Legal requirements: where disclosure is required by Thai law or a court order.

6. Cookies

We use cookies to maintain basic site functionality and, with your consent, to collect analytics data. Essential cookies are always active. Analytics, marketing, and preference cookies are optional and only set if you accept them via the cookie banner. You can review and update your preferences at any time on our Cookie Policy page.

7. Data Retention

Contact enquiry data is retained for up to 24 months from the date of submission. Course-related records are retained for the duration of enrolment plus three years. Analytics data is retained in aggregate for up to 26 months. You may request deletion of your data at any time (see Section 8).

8. Your Rights

Under the Thai PDPA, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data where there is no lawful reason to retain it.
• Withdraw consent for optional processing at any time.
• Object to processing based on legitimate interest.
• Request data portability in a structured, machine-readable format.
• Lodge a complaint with the Personal Data Protection Committee of Thailand.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

9. Data Protection Measures

We use industry-standard measures to protect stored data, including encrypted connections (HTTPS), access controls limited to authorised staff, and regular review of data handling processes. In the event of a data breach affecting your rights, we will notify you within the timeframe required by applicable law.

10. Third-Party Links

Our website may link to external resources or tools. We are not responsible for the privacy practices of third-party sites. We encourage you to review their policies before providing any personal information.

11. Children's Privacy

Our courses are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us so we can remove it promptly.

12. Policy Updates

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website or courses after a change constitutes acceptance of the updated policy. For significant changes, we will notify enrolled learners by email where possible.

13. Contact

For any questions about this policy or your data:

• Email: [email protected]
• Address: Gradient, 168 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand
• Phone: +66 2 681 4709