Privacy Policy
This policy explains how Cognivault collects, uses, and protects personal data provided by learners and website visitors. It applies to all services offered via our website and course platforms.
Last Updated: 10 June 2025 · Effective: 10 June 2025
1. Introduction and Data Controller
Cognivault operates as the data controller for all personal information collected through this website and our course enrolment processes. We are based at 156 Charoen Krung Road, Bang Rak, Bangkok 10500, Thailand.
We are committed to handling personal data responsibly and in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). If you have questions about this policy or how your data is handled, contact us at [email protected].
This policy covers data collected from prospective learners, enrolled students, and general website visitors. It does not cover third-party websites or services linked from our platform.
2. Data We Collect
We collect personal data in the following ways:
2.1 Contact and Enquiry Forms
- Full name
- Email address
- Phone number (optional)
- Message content
2.2 Enrolment and Course Data
- Course enrolment details and selected track
- Payment records (processed via third-party payment provider)
- Project submissions and assessment feedback
- Forum participation records
2.3 Automatically Collected Data
- IP address and approximate location
- Browser type and device information
- Pages visited and session duration (via analytics cookies, where consented)
2.4 Legal Basis for Processing
- Consent — for marketing communications and analytics cookies
- Contract — for data necessary to deliver enrolled courses and issue certificates
- Legitimate interest — for responding to enquiries and improving our services
- Legal obligation — for financial and tax record-keeping as required under Thai law
3. How We Use Your Data
Personal data is used only for the following purposes:
- Responding to enquiries and providing course information
- Processing enrolment, managing cohort access, and delivering course content
- Issuing completion certificates and portfolio review records
- Sending course updates, schedule changes, and administrative notices
- Improving our curriculum based on aggregated feedback and usage data
- Meeting financial record-keeping obligations under Thai law
We do not sell personal data to third parties. We do not use personal data for advertising profiling. Marketing emails are only sent where you have given specific consent and include an unsubscribe option in every message.
3.1 Data Sharing
We share data only where necessary:
- Payment processors (for transaction handling — we do not store card details)
- Course platform providers (for hosting and content delivery)
- Analytics providers (where cookie consent has been given)
- Thai government authorities if required by law
3.2 Data Retention
- Enquiry records: 12 months from last contact
- Enrolment and course records: 3 years from programme completion
- Payment records: 7 years as required under Thai accounting law
- Analytics data: 26 months (standard analytics retention)
4. Data Protection Measures
- All data transmitted to and from our systems is encrypted in transit using TLS
- Personal data at rest is stored on access-controlled servers with encryption
- Access to personal data is limited to staff with a specific operational need
- We review access controls and security practices at least once per year
- In the event of a data breach affecting personal data, we will notify affected individuals within 72 hours where required by the PDPA
5. Cookies
We use cookies to keep the website functioning, to understand how visitors use our pages, and — where consented — to support analytics. We do not use advertising or tracking cookies.
For a full breakdown of the cookies we use and how to manage your preferences, see our Cookie Policy.
6. Your Rights Under the PDPA
Thailand's Personal Data Protection Act gives you the following rights regarding your personal data held by Cognivault:
Right of Access
Request a copy of the personal data we hold about you and information about how it is used.
Right to Rectification
Ask us to correct inaccurate or incomplete data held about you.
Right to Erasure
Request deletion of your personal data, subject to our legal retention obligations.
Right to Data Portability
Receive your personal data in a structured, machine-readable format where technically feasible.
Right to Object
Object to processing of your data for marketing purposes or where based on legitimate interest.
Right to Withdraw Consent
Withdraw consent for any processing based on consent at any time, without affecting prior lawful processing.
To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have not been respected.
7. Third-Party Links
Our website and course materials may contain links to external resources, tools, or documentation. We are not responsible for the privacy practices of those third-party sites. We recommend reviewing their policies before providing any personal information.
8. Age Requirement
Our courses are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently received data from a minor, please contact us at [email protected] and we will delete it promptly.
9. Changes to This Policy
We may update this privacy policy when our practices or legal requirements change. Any material changes will be communicated to enrolled learners via email at least 14 days before they take effect. The updated policy will also be published on this page with a revised "Last Updated" date. Continued use of our services after that date constitutes acceptance of the updated terms.
10. Contact for Data Enquiries
For any privacy-related question, rights request, or concern, please reach us through: