Legal

Privacy Policy

How Mindforge collects, uses, and protects your personal data — in line with Thailand's Personal Data Protection Act (PDPA) B.E. 2562.

Last updated: 1 June 2025

1. Who We Are

Mindforge operates as an online AI development school based in Bangkok, Thailand. Our registered address is 305 Phaholyothin Road, Chatuchak, Bangkok 10900, Thailand. You can reach us at +66 2 513 8607 or [email protected].

We are the data controller for the personal information you provide to us when you use our website or enrol in our courses.

2. Information We Collect

Information you give us directly

  • Name and contact details (email address, phone number) submitted via our enquiry or enrolment forms
  • Course preferences and questions you include in your messages
  • Payment information processed by our third-party payment provider (we do not store card details ourselves)

Information collected automatically

  • Browser type, device type, and operating system
  • Pages visited on our website and time spent on each page
  • Referring URL and general geographic region (country or city level)
  • Cookie identifiers, where you have given consent (see our Cookie Policy)

3. How We Use Your Information

We use personal data only for the purposes described below. We do not sell your data to third parties.

  • To respond to enquiries — when you contact us, we use your details to reply to your message.
  • To process enrolments — we need your name and contact information to set up your course access and send you relevant course materials.
  • To send course-related communications — updates about your enrolled course, schedule changes, or mentor feedback. You can opt out of non-essential emails at any time.
  • To improve our website — anonymised analytics data helps us understand how visitors use our site so we can make it more useful.
  • To comply with legal obligations — we may need to retain certain records for tax or regulatory purposes.

4. Legal Basis for Processing

Under Thailand's PDPA, we process your personal data on the following bases:

  • Contractual necessity — processing required to fulfil a course enrolment you have entered into with us.
  • Legitimate interests — improving our services and responding to enquiries, where these interests are not overridden by your rights.
  • Consent — for marketing communications and non-essential cookies. You may withdraw consent at any time.
  • Legal obligation — where we are required to retain or disclose data by law.

5. Data Sharing

We share personal data only where necessary:

  • Service providers — email delivery, payment processing, and analytics providers who act on our instructions and are bound by data protection agreements.
  • Mentors — your name and course progress may be visible to the mentor assigned to your track, for the purpose of providing feedback.
  • Authorities — if required by Thai law or a lawful order, we may disclose information to relevant authorities.

We do not transfer your data to countries outside Thailand or the EEA without appropriate safeguards in place.

6. Data Retention

We keep your data for as long as is necessary for the purpose for which it was collected:

  • Enquiry form submissions — up to 12 months after last contact
  • Enrolment and course records — up to 5 years for financial and legal compliance
  • Analytics data — aggregated and anonymised, retained indefinitely

7. Your Rights

Under the PDPA and applicable law, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request erasure of your data where we no longer have a lawful basis to hold it
  • Restrict or object to processing in certain circumstances
  • Withdraw consent at any time, without affecting the lawfulness of prior processing
  • Lodge a complaint with Thailand's Personal Data Protection Committee

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

8. Cookies

We use cookies and similar technologies on our website. For full details of what cookies we use and how to manage them, please read our Cookie Policy.

9. Security

We take reasonable technical and organisational steps to protect your personal data from unauthorised access, disclosure, or loss. Our website uses HTTPS encryption. However, no online transmission is entirely without risk, and we encourage you to take care when sharing personal information online.

10. Children's Data

Our courses are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data to us, please contact us and we will remove it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please reach out: