Legal document
Privacy Policy
Last updated: 12 May 2025
1. Introduction
rasmitez Tech operates an online school offering part-time courses in AI ethics, responsible AI practice, and AI governance. This Privacy Policy describes how we collect, use, store, and protect personal data provided to us by people who visit our website or enrol in our programmes.
We take data protection seriously and collect only the information we need to administer our programmes and communicate with prospective and current participants. We do not sell personal data or share it for advertising purposes.
This policy applies to all personal data we hold about website visitors, enquirers, and enrolled participants. If you have questions about anything in this policy, please write to us at [email protected].
rasmitez Tech is based at 88 Witthayu Road, Lumphini, Pathumwan, Bangkok 10330, Thailand. We operate under Thai law, including the Personal Data Protection Act B.E. 2562 (2019) (PDPA).
2. What personal data we collect
We collect the following categories of personal data:
- Contact information — your name, email address, and phone number (if provided), when you submit an enquiry through our website.
- Enrolment information — your name, email address, payment reference, and programme selection when you enrol in a course.
- Programme work — written reflections, discussion thread contributions, and applied project materials submitted during a programme. These are held only for the duration of your enrolment and for a reasonable period afterwards.
- Website usage data — standard log data including IP address, browser type, pages visited, and time of visit, collected automatically when you visit our website. This data is used only in aggregate form.
- Cookie data — preferences stored in your browser. See Section 6 for details.
We collect personal data through our website enquiry form, email correspondence, and our learning platform. We do not collect sensitive personal data (such as health information or biometric data).
Legal basis for processing: We process personal data on the basis of your consent (for marketing communications), on the basis of a contract (for administering your programme enrolment), and on the basis of legitimate interest (for website security and improving our services).
Retention periods: Enquiry data is held for up to 24 months. Programme participation records are held for up to 5 years after completion. Website log data is held for up to 12 months.
3. How we use your personal data
We use the personal data we collect for the following purposes:
- Responding to enquiries about our programmes
- Processing programme enrolments and administering your participation
- Communicating with you about your programme, including tutor feedback and schedule information
- Sending administrative information such as changes to our programmes or policies
- Improving our website and learning platform based on aggregated usage data
- Complying with legal obligations under Thai law
We do not use your personal data for automated decision-making or profiling. We do not share your personal data with third parties for marketing purposes.
We use a small number of third-party services to deliver our programmes, including a learning platform provider and an email service provider. These service providers process data only on our instructions and are subject to appropriate data processing agreements.
If you have opted in to receive information about future programmes, we may send you occasional emails about new offerings. You can opt out at any time by writing to [email protected].
4. How we protect your data
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or loss. These measures include:
- Encrypted data transmission (HTTPS) across our website and learning platform
- Password protection and access controls on all systems holding personal data
- Restricted access — only staff members with a legitimate need to access personal data are permitted to do so
- Regular review of our security practices
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and, where required, the relevant supervisory authority in Thailand (the Personal Data Protection Committee) within the timeframes required by the PDPA.
5. Cookies
Our website uses cookies. Essential cookies are necessary for the site to function and are always active. We also use optional analytics cookies to understand how visitors use the site. We do not use advertising or tracking cookies.
You can manage your cookie preferences through the cookie consent panel that appears when you first visit the site, or at any time through our Cookie Policy page.
6. Your rights
Under the Thai Personal Data Protection Act (PDPA) and, where applicable, other data protection legislation, you have the following rights in relation to your personal data:
- Right of access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can ask us to correct inaccurate or incomplete data.
- Right to erasure — you can ask us to delete your personal data in certain circumstances.
- Right to data portability — you can request your data in a structured, machine-readable format.
- Right to object — you can object to our processing of your data on grounds of legitimate interest.
- Right to withdraw consent — where we process your data based on consent, you can withdraw it at any time.
- Right to lodge a complaint — you have the right to lodge a complaint with the Personal Data Protection Committee of Thailand if you believe we have handled your data incorrectly.
To exercise any of these rights, please write to [email protected]. We will respond within 30 days.
7. Third-party links
Our website may contain links to external sites or resources. We are not responsible for the privacy practices of those sites and this policy does not apply to them. We encourage you to read the privacy policies of any external sites you visit.
8. Age restrictions
Our programmes are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. When we do, we will update the date at the top of this page. If we make material changes that affect how we use your data, we will notify enrolled participants by email. Continued use of our website or services after a change constitutes acceptance of the updated policy.
10. Contact
For any questions or requests relating to this privacy policy or your personal data, please contact us:
rasmitez Tech
88 Witthayu Road, Lumphini, Pathumwan, Bangkok 10330, Thailand
Email: [email protected]
Phone: +66 2 851 3962