Privacy Policy

1. Introduction

Gradientco ("we", "us", "our") operates at 408 Surawong Road, Si Phraya, Bang Rak, Bangkok 10500, Thailand. This policy describes how we collect, use, and protect personal data when you use our website at gradientco.pro or enrol in one of our online courses.

We handle personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). If you have questions about this policy, contact us at [email protected].

2. Data We Collect

2.1 Information you provide

• Name and email address — collected via the contact form and at enrolment
• Phone number — collected via the contact form if you choose to provide it
• Course-related communications — messages you send through office hours sessions or written project feedback exchanges

2.2 Information collected automatically

• Cookie data — see Section 6 and our Cookie Policy
• Analytics data — page views, session duration, and browser type, collected via analytics tools if you have consented
• Technical data — IP address, browser type, operating system, used for security and service improvement

2.3 Legal basis for processing

• Contract performance — processing necessary to deliver the course you enrolled in
• Consent — analytics cookies, marketing communications (if opted in)
• Legitimate interest — security, fraud prevention, improving course materials based on aggregate feedback

2.4 Data retention

Enrolment and course records are retained for five years after course completion. Contact form data is retained for two years. Analytics data is retained for 14 months.

3. How We Use Your Data

• Delivering access to courses and course materials you have enrolled in
• Responding to enquiries sent via the contact form or by phone
• Sending course-related administrative communications (e.g. access details, schedule reminders)
• Processing written feedback and project reviews
• Improving course materials based on aggregated, anonymised feedback patterns
• Complying with applicable law

We do not sell your personal data. We do not share it with third parties for marketing purposes.

3.1 Third parties we use

• Analytics provider — aggregate, anonymised website usage data (if consent given)
• Cloud hosting provider — for course platform infrastructure; processes data under a data processing agreement
• Video conferencing platform — for mentor office hours sessions

4. Data Security

We store personal data on servers located in Thailand and in jurisdictions with adequate data protection standards. Access to personal data is restricted to staff who need it to perform their role. We use encrypted connections (HTTPS) for data transmission. In the event of a data breach that may affect your rights, we will notify you and the relevant authority as required under the PDPA.

5. Cookies

Our website uses cookies for essential site functions, analytics (with consent), and preference storage (with consent). Full details of which cookies we use and how to manage them are in our Cookie Policy. You can manage cookie preferences at any time on that page.

6. Your Rights

Under Thailand's PDPA, you have the following rights:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data, subject to our legitimate record-keeping obligations
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — withdraw consent at any time without affecting the lawfulness of processing before withdrawal
• Right to lodge a complaint — with the Office of the Personal Data Protection Committee (PDPC) in Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external resources such as documentation or reference material. We are not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies before providing any personal data.

8. Age Restrictions

Our courses are intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data through our website, please contact us so we can remove it.

9. Updates to This Policy

We may update this policy to reflect changes in our practices or in applicable law. When we make material changes, we will update the date at the top of this page. If you have an active enrolment, we will notify you by email of significant changes.

10. Contact

For privacy-related questions or to exercise your rights: