Privacy Policy (PDPA Notice)

1. Data controller

The data controller under this policy is True Coding School, located at 65/31 Moo 2, Chaofa-Suanluang Road, Vichit, Muang, Phuket 83000, Thailand.

We operate a coding and digital skills school for children and youth. This notice explains how we collect, use, disclose, and protect personal data when you use our website, contact forms, trial booking system, or other channels we operate.

2. Personal data we collect

We collect only data that is necessary to provide our services and respond to you:

• Identity data: full name (parent/guardian or contact person), student name
• Contact data: phone number, LINE ID (if provided), email (if provided)
• Education-related data: student age, course interests, coding background and goals, preferred trial date/time, notes or messages
• Technical data: browser type, device, IP address, access logs, and essential cookies required for the website to function (if any)
• Consent records: proof of acceptance of this privacy policy and the time consent was given

3. Sources of data

We receive data directly from you when you submit forms on our website, book a trial class, call us, contact us via LINE or email, or otherwise communicate with us.

We do not purchase contact lists from third parties and we do not collect unrelated data without a legitimate purpose.

4. Purposes and legal bases

We process personal data for the purposes below, relying on the applicable legal bases under the PDPA:

• Responding to enquiries and scheduling trial classes — your consent and/or steps prior to entering a contract
• Managing schedules and customer service — contract performance and legitimate interests
• Improving website security and user experience — legitimate interests
• Compliance with law, court orders, or government authorities — legal obligation

5. Disclosure to third parties

We do not sell or rent your personal data. We may disclose data to data processors who assist us, subject to confidentiality and security obligations, including:

• Email service providers (e.g. Brevo) for contact form notifications
• True Coding School customer and trial booking systems
• Cloud hosting, infrastructure, and backup providers
• Legal or accounting advisers where required by law

6. Cross-border transfers

Some of our service providers may process data on servers outside Thailand (for example in the European Union). Where this occurs, we ensure appropriate safeguards as required by the PDPA, such as data protection agreements or recognised standards.

7. Retention period

We retain personal data only as long as necessary for the purposes stated:

• Contact and trial booking data: up to 2 years from your last interaction, or until you request deletion (whichever is shorter)
• Financial or tax records (if any): as required by applicable law
• After the retention period, we delete, destroy, or anonymise the data

8. Security measures

We implement appropriate technical and organisational measures, including HTTPS encryption, access controls, secure credentials, staff awareness, and periodic review, to protect data against unauthorised access, use, alteration, disclosure, or destruction.

9. Your rights under the PDPA

Under Thailand's Personal Data Protection Act, you have the right to:

• Access and obtain a copy of your personal data
• Request correction so data is accurate, up to date, complete, and not misleading
• Request deletion or destruction, or anonymisation
• Request restriction of processing
• Object to processing
• Withdraw consent where processing is based on consent (withdrawal does not affect prior lawful processing)
• Request data portability where applicable under law

10. How to exercise your rights

Contact our privacy officer using the details in section 14. Please include your name, contact details, and the nature of your request.

We will respond within 30 days of receiving a complete request. If we cannot comply, we will explain why and provide an appropriate timeframe.

We may ask for proof of identity before acting on a request to prevent unauthorised disclosure.

11. Consent

By ticking the privacy policy checkbox before submitting a form, you consent to our collection and use of your data for the purposes described here.

You may withdraw consent at any time by contacting us. Withdrawal may mean we cannot provide certain services (for example, arranging a callback or trial class).

12. Children and minors

Our services are designed for children and youth. Student information (such as name and age) should be submitted by a parent, guardian, or other lawful representative.

If you believe we have received a child's data without appropriate consent, please contact us so we can delete it promptly.

13. Cookies and similar technologies

Our website may use cookies that are essential for basic operation. If we introduce analytics or marketing cookies in the future, we will inform you and request consent as required by law.

You may configure your browser to refuse cookies, but some features may not work correctly.

14. Contact and complaints

Privacy contact: True Coding School

Address: 65/31 Moo 2, Chaofa-Suanluang Road, Vichit, Muang, Phuket 83000, Thailand

Phone: +66 62 086 7916 (Tue–Sun, 12:30–19:00, closed Mondays)

Email: info.truecodingschool@gmail.com

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Committee (PDPC), call 1215, or visit www.pdpc.or.th

15. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the updated date shown above.