Legal
Privacy Policy
Last Updated: 14 April 2025 · Data Controller: Bhumi AI
Bhumi AI takes the handling of personal data seriously. This policy explains what data we collect when you interact with our website or enrol in our programmes, how we use it, and the rights you have under applicable law. We operate in Thailand and comply with the Personal Data Protection Act B.E. 2562 (PDPA).
If you have questions about this policy or how your data is handled, write to us at [email protected].
1. What data we collect
When you use our contact form or make an enquiry, we collect: your name, email address, phone number (if provided), and the content of your message. When you enrol in a programme, we additionally collect payment records and programme participation data.
We also collect standard web analytics data — page views, session durations, browser type, and approximate location — through analytics tools. This data is not linked to personal identifiers unless you have submitted a contact form.
We use cookies on this site. See our Cookie Policy for details on the types and purposes of cookies used.
2. Legal basis for processing
- Consent — for analytics and marketing cookies, and for receiving updates about programmes.
- Contract performance — for data necessary to administer enrolment, deliver course content, and communicate with enrolled students.
- Legitimate interest — for responding to enquiries and maintaining records of communications for quality purposes.
- Legal obligation — for records required by Thai law.
3. How we use your data
- Responding to enquiries submitted through the contact form
- Administering enrolment and delivering programme content
- Sending course-related communications — assignments, schedules, feedback
- Improving the website and course content based on usage patterns
- Complying with legal obligations under Thai law
We do not use your personal data for automated decision-making that produces legal or similarly significant effects. We do not sell personal data. We do not share personal data with third parties for their own marketing purposes.
4. Data sharing and third parties
We use a small number of third-party services to operate our programmes and website:
- Payment processors — for handling course fees. We do not store full card details.
- Analytics services — for understanding website usage. Data is aggregated and anonymised where possible.
- Email communication tools — for sending course-related messages to enrolled students.
These third parties process data only as instructed by us and are not permitted to use it for their own purposes.
5. Data retention
We retain personal data only for as long as necessary:
- Enquiry data from non-enrolled contacts: up to 12 months after last contact
- Enrolment and course records: up to 5 years after programme completion, as required for business records
- Payment records: as required by Thai tax and accounting law
- Analytics data: in anonymised/aggregated form; identified session data is not retained long-term
6. Data protection measures
Personal data transmitted to and from our website is protected by TLS encryption. Access to personal data within our systems is restricted to staff who require it for their role. We review our data handling practices regularly and have procedures in place for responding to data security incidents. In the event of a breach that affects your personal data, we will notify you and the relevant authority as required by the PDPA.
7. Your rights under the PDPA
Under Thailand's Personal Data Protection Act, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data, subject to legal retention requirements
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Withdrawal of consent — withdraw consent at any time where processing is based on consent
- Complaint — lodge a complaint with Thailand's Personal Data Protection Committee
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Third-party links
Our website may link to external sites — for example, to academic papers or tools referenced in our curricula. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site before providing personal information.
9. Children's privacy
Our programmes are designed for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data through our site, contact us at [email protected] and we will delete it promptly.
10. Changes to this policy
We may update this policy from time to time. When we make significant changes, we will note the updated date at the top of this page and, where appropriate, inform enrolled students by email. Continued use of our services after an update constitutes acceptance of the revised policy.
11. Contact
For data-related enquiries:
- Email: [email protected]
- Address: Bhumi AI, 145/9 Phaholyothin Road, Chatuchak, Bangkok 10900, Thailand