Privacy Policy
Effective Date: January 15, 2025
SparkDataFlow operates under Thailand's Personal Data Protection Act (PDPA) B.E. 2562, which came into full enforcement in 2022. We respect your privacy and handle your personal information with care. This policy explains what we collect, why we collect it, and how you can control your data when using our budget education services.
Information We Collect
When you interact with our financial education platform, we gather different types of information. Some you provide directly, others we collect automatically as you use our services.
Personal Information You Provide
- Name and contact details (email, phone number) when you register for courses or request information
- Payment information processed through secure third-party providers when you enroll in paid programs
- Educational background and learning goals you share during registration
- Communication content when you email us or fill out contact forms
- Professional information if you're seeking career development through our courses
Automatically Collected Data
Our website collects technical information to improve your experience and understand how people use our platform:
- Browser type, device information, and operating system details
- IP address and approximate geographic location (city level only)
- Pages viewed, time spent on each page, and navigation patterns
- Referral sources that brought you to our website
- Course progress and completion data for enrolled students
How We Use Your Information
We're not in the business of selling your data. Everything we collect serves a specific purpose related to delivering quality financial education.
| Purpose | Legal Basis Under PDPA |
|---|---|
| Delivering courses and educational content you've enrolled in | Contract performance |
| Processing payments and maintaining financial records | Legal obligation |
| Sending course updates and educational materials | Legitimate interest |
| Improving course content based on feedback | Legitimate interest |
| Responding to your inquiries and support requests | Contract performance |
We analyze aggregated user data to understand which topics resonate most with students and where people struggle. This helps us create better educational content, but it doesn't involve examining individual student behavior in ways you'd find intrusive.
Data Sharing and Third Parties
Running an online education platform requires working with other companies. We're selective about who we share data with and limit sharing to what's necessary.
Service Providers We Work With
- Payment processors who handle transactions securely (your full card details never touch our servers)
- Email service providers who help us send course updates and communications
- Cloud hosting services that keep our platform running reliably
- Analytics tools that help us understand website usage patterns
- Customer support software to manage and respond to your questions efficiently
Important: These third parties can only use your data to provide services to us. They can't use it for their own purposes or share it with others. We have contracts with each provider requiring them to protect your information.
When Law Requires Disclosure
Sometimes we have to share information because the law requires it. This includes responding to valid legal requests from Thai authorities, protecting against fraud, or enforcing our terms of service. We'll notify you about such requests unless legally prohibited from doing so.
Your Rights Under Thailand PDPA
Thailand's data protection law gives you significant control over your personal information. Here's what you can do:
Access and Portability
You can request a copy of all personal data we hold about you. We'll provide it in a commonly used electronic format within 30 days. This includes enrollment records, course progress, and communication history.
Correction and Updates
Found a mistake in your profile? You can update most information directly through your student dashboard. For data you can't change yourself, email us and we'll make corrections within 15 days.
Deletion Requests
You can ask us to delete your account and associated data. We'll comply unless we need to keep certain information for legal or legitimate business reasons (like tax records or preventing fraud). Even after deletion, some data may remain in backup systems for up to 90 days before permanent removal.
Objection and Restriction
Don't want to receive marketing emails? Unsubscribe anytime using the link at the bottom of our messages. You can also object to certain types of data processing while still using our services, though this might limit some features.
Filing a Complaint: If you're unhappy with how we handle your data, you can file a complaint with Thailand's Personal Data Protection Committee. We'd prefer to resolve concerns directly, so please contact us first.
Data Security Measures
We take security seriously because your trust matters. Our approach combines technical safeguards with organizational policies.
Technical Protection
- SSL/TLS encryption for all data transmitted between your browser and our servers
- Encrypted storage of sensitive personal information in our databases
- Regular security audits and vulnerability assessments
- Multi-factor authentication for staff accessing student data
- Automated backup systems with encrypted off-site storage
Organizational Safeguards
Only employees who need access to perform their jobs can view student data. We train our team regularly on privacy practices and data handling procedures. Everyone who works with personal information signs confidentiality agreements.
Despite our precautions, no system is completely secure. If we discover a data breach affecting your information, we'll notify you within 72 hours as required by PDPA and explain what happened and what we're doing about it.
Data Retention Periods
We don't keep your information forever. Different types of data have different retention schedules based on legal requirements and practical needs.
| Data Type | Retention Period |
|---|---|
| Student enrollment records and course completion certificates | 7 years after course completion |
| Payment and financial transaction records | 10 years (Thai tax law requirement) |
| Marketing contact information (if you unsubscribe) | 30 days |
| Website usage analytics | 26 months |
| Support ticket correspondence | 3 years after resolution |
After these periods expire, we either delete your data or anonymize it so it can't be linked back to you. Anonymized data might be kept longer for statistical analysis and improving our courses.
International Data Transfers
Most of your data stays within Thailand, but some service providers we use operate servers in other countries. When we transfer data internationally, we ensure adequate protection through standard contractual clauses approved by data protection authorities.
For example, our email service provider stores some data in Singapore, which has data protection laws considered adequate by international standards. Cloud backup services may store encrypted copies in multiple geographic locations for redundancy.
You have the right to know about these transfers and object if you have concerns. We'll work with you to find solutions that protect your privacy while still allowing us to deliver quality educational services.
Cookies and Tracking Technologies
Our website uses cookies to remember your preferences and understand how people use our platform. Some cookies are essential for the site to work, while others help us improve your experience.
Types of Cookies We Use
- Essential cookies that remember your login status and keep your session secure
- Preference cookies that save your language choice and interface settings
- Analytics cookies that show us which pages are most popular and where people encounter problems
- Performance cookies that help us optimize loading times and technical performance
You can control cookies through your browser settings. Blocking certain cookies might affect how well the site works. For example, you'll need to log in more frequently if you block session cookies.
Children's Privacy
Our courses focus on adult financial education. We don't knowingly collect information from anyone under 18 without parental consent. If a parent or guardian discovers their child has provided personal information without permission, please contact us immediately and we'll delete it.
For students aged 15-18 interested in our programs, we require verifiable parental consent before enrollment. This protects young learners while still making financial education accessible.
Changes to This Policy
We update this privacy policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email and display a prominent notice on our website for at least 30 days.
The "Effective Date" at the top shows when the current version took effect. We keep archived versions of previous policies available on request, so you can see what changed over time.
Continuing to use our services after policy changes means you accept the updated terms. If you disagree with changes, you can close your account before they take effect.
Contact Us About Privacy
Have questions about how we handle your data? Want to exercise your privacy rights? We're here to help.
Email: info@sparkdataflow.com
Phone: +66 2 969 9700 (Monday-Friday, 9:00 AM - 5:00 PM Thailand time)
Mail: SparkDataFlow Privacy Officer
Phahonyothin Rd, Yan Matsi
Amphoe Mueang, Nakhon Sawan 60130
Thailand
We aim to respond to all privacy inquiries within 7 business days. For complex requests, we might need up to 30 days and will keep you updated on progress.