1. Information We Collect

Personal Information You Provide

When you register for our learning programs or use our services, we collect information that you voluntarily provide to us. This happens through various touchpoints with our platform.

• Account registration details including your full name, email address, and phone number
• Payment information when you enroll in courses (processed through secure third-party payment processors)
• Professional background information to tailor educational content to your experience level
• Communication preferences and language settings
• Questions or feedback you submit through our contact forms

Automatically Collected Information

Our platform collects certain technical information to improve functionality and understand how users interact with our services. This helps us make better decisions about feature development.

• Browser type, operating system, and device information
• IP address and approximate geographic location (city level)
• Pages visited and time spent on different sections
• Referring websites and search terms used to find us
• Course progress and completion metrics

Learning Activity Data

To provide educational services effectively, we track your progress through courses and programs. This information helps us understand what's working and where students might need additional support.

• Quiz scores and assignment submissions
• Video watch time and module completion status
• Discussion forum participation
• Practice exercise results and budget templates created

2. How We Use Your Information

We use the information we collect for specific purposes that directly benefit your experience with our platform. We don't use your data for purposes beyond what we describe here.

• Service Delivery: Creating and managing your account, processing enrollments, providing access to course materials
  • Sending course reminders and upcoming program notifications
  • Generating certificates upon program completion
  • Providing technical support when you need assistance
• Educational Improvement: Analyzing learning patterns to enhance course content and platform functionality
• Communication: Sending important updates about your courses, changes to our services, and relevant educational opportunities
• Legal Compliance: Meeting our obligations under Thai law and maintaining proper business records
• Platform Security: Detecting and preventing fraud, unauthorized access, and technical issues

We occasionally send information about new courses or features that might interest you based on your previous activity. You can opt out of these communications at any time through your account settings.

3. Legal Basis for Processing (PDPA Compliance)

Under Thailand's Personal Data Protection Act, we must have a legal basis for processing your personal data. Here's what applies to different types of information we handle:

4. Information Sharing and Disclosure

We don't sell your personal information. Period. However, we do share information with specific third parties who help us operate our platform and deliver services to you.

Service Providers We Work With

• Payment Processors: We use reputable payment gateways licensed to operate in Thailand. They receive only the information necessary to process transactions and are bound by strict security requirements.
• Cloud Hosting Services: Our platform runs on secure cloud infrastructure. These providers have access to data stored on their servers but are contractually prohibited from using it for any purpose other than hosting our services.
• Email Service Providers: Course notifications and updates are sent through email delivery services. They process email addresses and message content only for delivery purposes.
• Analytics Tools: We use analytics services to understand how people use our platform. These tools collect aggregated, anonymized data about user behavior.

Legal Requirements

We may disclose your information if required by Thai law, court order, or government regulation. This includes responding to lawful requests from authorities investigating potential violations of law.

5. Your Rights Under Thai Law

The PDPA gives you significant control over your personal information. Here are your rights and how to exercise them:

• Right to Access: You can request a copy of all personal information we hold about you. We'll provide this within 30 days at no charge for your first request each year.
• Right to Rectification: If your information is inaccurate or incomplete, you can ask us to correct it. Most account information can be updated directly in your profile settings.
• Right to Erasure: You can request deletion of your account and associated data. We'll honor this within 30 days, though we may retain some information for legal compliance purposes.
• Right to Data Portability: You can receive your personal data in a structured, commonly used format, or request that we transfer it directly to another service provider where technically feasible.
• Right to Object: You can object to processing based on legitimate interests. We'll stop processing unless we demonstrate compelling legitimate grounds that override your interests.
• Right to Restrict Processing: In certain situations, you can ask us to temporarily halt processing while we address your concerns about accuracy or lawfulness.
• Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time. This won't affect the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at info@energiconnective.com. We'll respond within 30 days as required by Thai law. If your request is complex or we receive multiple requests from you, we may extend this period by up to 60 additional days with notification.

6. Data Security Measures

Protecting your information is something we think about constantly. We've implemented multiple layers of security, though no system can be completely immune to determined attacks.

Technical Safeguards

• Industry-standard encryption for data transmission (TLS 1.3)
• Encrypted storage of sensitive information at rest
• Regular security audits and penetration testing
• Automated backup systems with secure off-site storage
• Firewalls and intrusion detection systems monitoring network traffic

Organizational Measures

• Access to personal data limited to employees who need it for their job functions
• Mandatory privacy and security training for all staff
• Confidentiality agreements with all employees and contractors
• Incident response procedures for potential data breaches

7. Data Retention Periods

We don't keep your information longer than necessary. Different types of data have different retention periods based on legal requirements and business needs.

• Active Account Data: Retained as long as your account remains active and for 2 years after your last login
• Course Completion Records: Maintained for 7 years to support certificate verification and regulatory compliance
• Payment Information: Transaction records kept for 7 years per Thai accounting and tax regulations
• Marketing Communications: Contact lists updated regularly; inactive contacts removed after 3 years
• Technical Logs: Server logs and analytics data aggregated and anonymized after 90 days
• Support Communications: Inquiry records and correspondence kept for 3 years

When we no longer need information, we securely delete or anonymize it. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

8. International Data Transfers

Our primary servers are located in Thailand, but some of our service providers operate globally. When your information is transferred outside Thailand, we ensure appropriate safeguards are in place.

• We only work with providers in countries recognized by Thailand's Personal Data Protection Committee as having adequate protection levels, or who have implemented appropriate safeguards
• Data processing agreements include standard contractual clauses approved by Thai authorities
• We conduct due diligence on international providers' security practices before engagement
• Regular audits verify compliance with cross-border data transfer requirements

If you have concerns about international transfers of your data, contact us to discuss available options.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve functionality and understand usage patterns. You have control over most cookies through your browser settings.

Types of Cookies We Use

• Essential Cookies: Required for basic site functionality like maintaining your login session. These can't be disabled without breaking core features.
• Functional Cookies: Remember your preferences like language settings and theme choices
• Analytics Cookies: Help us understand how visitors use the site so we can improve it
• Performance Cookies: Collect information about page load times and technical errors

You can block cookies through your browser settings, though this may limit some functionality. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications before cookies are stored.

10. Children's Privacy

Our services are designed for adults and business professionals. We don't knowingly collect personal information from individuals under 18 years old. If you're under 18, please don't register for an account or submit any personal information.

If we discover that we've inadvertently collected information from someone under 18, we'll delete it as soon as reasonably possible. Parents or guardians who believe we may have collected information from a minor should contact us immediately.

11. Changes to This Privacy Policy

We update this policy occasionally to reflect changes in our practices, technology, legal requirements, or business operations. When we make significant changes, we'll notify you through email or a prominent notice on our platform at least 30 days before the changes take effect.

We encourage you to review this policy periodically. The "Last Updated" date at the top indicates when we last revised it. Your continued use of our services after changes become effective means you accept the updated policy.

If you disagree with changes to this policy, you can close your account before the changes take effect. We'll process your data according to the policy in place when you provided it.

12. Complaints and Disputes

If you believe we've mishandled your personal information or violated your privacy rights, please contact us first so we can try to resolve the issue directly.

If you're not satisfied with our response, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee. We'll cooperate fully with any investigation and implement recommendations they provide.

For disputes that can't be resolved through our internal processes or regulatory channels, both parties agree that any legal proceedings will be conducted in Thai courts under Thai law.