Privacy Policy

1. Introduction

Tensorhaus ("we", "us", "our") operates an applied AI education school at 145 Sukhumvit Soi 24, Khlong Tan, Khlong Toei, Bangkok 10110, Thailand. This Privacy Policy explains how we collect, use, store, and protect personal data you provide when you visit this website or enrol in one of our programmes.

We process personal data in accordance with the Thailand Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and any applicable supplementary regulations. If you have questions about this policy, contact us at [email protected].

2. Personal Data We Collect

We collect personal data through the contact form on our website and during the programme enrolment process. The categories of data we collect include:

• Full name and email address (required for contact and enrolment)
• Phone number (optional, provided at your discretion)
• Programme enrolment details and payment records
• Submitted notebook files and written communications during a programme
• Website usage data collected via cookies (see Section 5)

We do not collect sensitive personal data (as defined under the PDPA) unless you voluntarily provide it.

Legal basis for processing

• Performance of a contract — processing your enrolment, providing access to course materials, and delivering feedback
• Consent — marketing communications (you may withdraw consent at any time)
• Legitimate interests — improving programme quality, responding to enquiries

Retention periods

Enrolment and payment records are retained for seven years to comply with Thai accounting and tax law. Programme submissions and feedback are retained for three years after programme completion. Website enquiry data is retained for two years unless you request earlier deletion.

3. How We Use Your Data

We use personal data to:

• Process your enquiry or enrolment and communicate with you about it
• Provide access to programme materials and recorded lessons
• Deliver written feedback and mentor sessions
• Send programme-related communications (schedule updates, submission reminders)
• Send occasional information about new programmes, if you have given consent
• Analyse website usage to improve the site and programme content
• Meet legal obligations under Thai law

Data sharing

We do not sell your personal data. We may share it with:

• Payment processors acting under contractual obligation to protect your data
• Cloud storage and email service providers (data processing agreements in place)
• Analytics providers (Google Analytics — anonymised where possible)
• Legal or regulatory authorities where required by Thai law

4. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including:

• HTTPS encryption on this website
• Access-controlled cloud storage for submitted notebooks
• Access limited to staff who require it for their role
• Regular review of third-party service providers

In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the relevant supervisory authority as required under the PDPA.

5. Cookies

We use cookies to keep this website functioning and to understand how it is used. Cookies include essential (always active), analytics, and preference categories. You can manage your cookie preferences via the banner on our homepage or by visiting our Cookie Policy.

6. Your Rights Under the PDPA

As a data subject under the Thailand PDPA, you have the right to:

• Access — request a copy of personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data in certain circumstances
• Data portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — withdraw consent for marketing at any time, without affecting prior processing
• Lodge a complaint — with the Office of the Personal Data Protection Committee (PDPC), Thailand

To exercise any of these rights, email [email protected]. We will respond within 30 days.

7. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their own privacy policies before providing personal data.

8. Children's Privacy

Our programmes are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page with a revised "Last updated" date. Continued use of the website after changes are posted constitutes acceptance of the updated policy. We encourage you to check this page periodically.

10. Contact

For data-related enquiries or to exercise your rights: