Privacy Policy

1. Introduction

latentspacsdsd ("we", "us", "our") operates an online AI development school based at 33 Thalang Road, Muang, Phuket 83000, Thailand. This policy explains what personal data we collect, how we use it, and your rights in relation to it.

We handle personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). If you have questions about this policy, contact us at [email protected].

This policy applies to data collected through our website and through enrolment in our programmes. It does not apply to third-party websites we may link to.

2. Data We Collect

2.1 Information you provide directly

• Full name and email address (required for enquiry form and enrolment)
• Phone number (optional, provided via contact form)
• Programme enquiry messages and any information you include in correspondence
• Payment details (processed by our payment provider — we do not store card data)

2.2 Programme-related data

• Submitted exercises and project files
• Programme progress and completion records
• Feedback notes and mentoring session records (Capstone track)

2.3 Automatically collected data

• IP address and browser type (via analytics tools, if you consent to analytics cookies)
• Pages visited and time on site
• Cookie data (see Section 5)

2.4 Legal basis for processing

• Contract: processing necessary to provide the programme you enrolled in
• Consent: marketing communications and optional analytics cookies
• Legitimate interest: responding to enquiries, improving programme quality
• Legal obligation: where Thai law requires us to retain records

3. How We Use Your Data

• Responding to enquiries and providing information about programmes
• Processing enrolment and delivering programme content and feedback
• Scheduling and conducting mentoring sessions (Capstone track)
• Sending programme-related notifications (progress updates, feedback availability)
• Issuing completion records
• Improving programme content based on aggregate feedback and completion data
• Complying with legal and regulatory requirements under Thai law

3.1 Marketing communications

We may send emails about new programmes or updates if you have consented to marketing communications. You can withdraw that consent at any time by emailing [email protected] or using the unsubscribe link in any marketing email.

3.2 Data sharing

We do not sell or share your personal data with third parties for their marketing purposes. We use a payment processor to handle transactions — that processor handles your payment data under their own privacy policy. We may use analytics tools (subject to your cookie consent) to understand how the website is used.

3.3 Retention periods

• Enquiry data: 12 months from last contact if no enrolment follows
• Programme records (enrolment, submissions, feedback): 3 years from programme completion
• Payment records: 7 years (tax and legal obligation)
• Mentoring session records: 2 years from programme completion

4. Data Protection Measures

• Personal data stored on servers with encryption at rest
• Access to personal data restricted to staff with a clear need to access it for programme delivery purposes
• Payment processing handled by a PCI-DSS compliant third-party provider — we do not store card numbers
• In the event of a data breach affecting your personal data, we will notify you and the relevant Thai authority within 72 hours of discovery where required by the PDPA
• We conduct an internal review of data handling practices annually

5. Cookies

We use essential cookies to operate the site and optional analytics and preference cookies if you consent. You can manage your cookie preferences at any time via our Cookie Policy page.

• Essential: required for basic site function, cannot be disabled
• Analytics: help us understand how pages are used (requires consent)
• Preferences: remember your settings (requires consent)
• Marketing: used for targeted advertising if consented

6. Your Rights

Under Thailand's PDPA, you have the following rights regarding your personal data:

• Access: request a copy of personal data we hold about you
• Rectification: ask us to correct inaccurate or incomplete data
• Erasure: request deletion of your personal data in certain circumstances
• Portability: receive your data in a structured, machine-readable format where technically feasible
• Objection: object to processing based on legitimate interest
• Restriction: request that we limit processing in certain situations
• Withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior lawful processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe we have handled your data unlawfully, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

7. Third-Party Links

Our website may include links to external resources, tools, or documentation. We are not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies before providing any personal data.

8. Children's Privacy

Our programmes are designed for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data through our site, please contact us at [email protected] and we will delete it promptly.

9. Policy Updates

We may update this policy when our practices change or when legal requirements change. The updated version will be posted on this page with a revised "Last Updated" date. Continued use of our services after a material change constitutes acceptance of the updated policy. For significant changes affecting your rights, we will notify active learners by email.

10. Contact

For any data-related questions or to exercise your rights: