Privacy Policy — Nexoraz

Nexoraz ("we", "us", "our") is committed to handling personal data with care and transparency. This Privacy Policy explains what information we collect, how we use it, and the rights you have in relation to your data. Our operations are based in Bangkok, Thailand, and we process personal data in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) and applicable Thai data protection regulations.

1. Data Controller

Nexoraz
214 Rama III Road, Chong Nonsi, Yan Nawa, Bangkok 10120, Thailand
Email: [email protected]
Phone: +66 2 285 6193

2. Information We Collect

We collect personal data only when it is provided voluntarily through our contact form or by direct communication. The types of data we may collect include:

Full name
Email address
Phone number (if provided)
Message content submitted via the enquiry form
Browser and session data collected through cookies (see our Cookie Policy)

We do not collect sensitive personal data (such as financial account numbers, health records, or identity document information) through our website. Any financial documents shared during in-person sessions are used solely for educational purposes within those sessions and are not retained.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the PDPA:

Consent: For marketing communications, where you have opted in
Legitimate interest: To respond to enquiries submitted through our contact form
Contract performance: To manage programme enrolment and delivery
Legal compliance: Where required by Thai law

4. How We Use Your Data

Personal data collected through our website is used for:

Responding to enquiries and scheduling consultations
Programme administration and communication
Sending information about our programmes where consent has been given
Improving our website through anonymised analytics
Compliance with legal obligations

We do not sell personal data to third parties. We do not use personal data for purposes beyond those listed above without your consent.

5. Data Retention

We retain personal data for as long as is necessary to fulfil the purpose for which it was collected:

Enquiry records: up to 12 months from last contact
Programme participant records: up to 3 years from programme completion
Legal and financial records: as required by Thai law (typically 5–7 years)

After the applicable retention period, data is securely deleted or anonymised.

6. Data Sharing

We do not share your personal data with third parties for commercial purposes. We may share data only in the following limited circumstances:

With service providers who support our website operations (hosting, analytics), who are bound by appropriate data processing agreements
Where required by Thai law or court order
With your explicit consent

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. In the event of a data breach that poses a risk to your rights, we will notify the relevant authority and affected individuals in accordance with the PDPA.

8. Cookies

Our website uses cookies to understand how visitors interact with our content. For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.

9. Your Rights Under the PDPA

As a data subject under the Personal Data Protection Act B.E. 2562, you have the following rights:

Right of access: To request a copy of the personal data we hold about you
Right to rectification: To correct inaccurate or incomplete data
Right to erasure: To request deletion of your data, subject to legal obligations
Right to data portability: To receive your data in a structured, commonly used format
Right to object: To object to processing based on legitimate interest
Right to withdraw consent: At any time, without affecting prior lawful processing
Right to lodge a complaint: With the Office of the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any external site you visit.

11. Children

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from persons under 18 years of age. If you believe we have inadvertently done so, please contact us immediately at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our website after changes are posted constitutes acceptance of the revised policy. We encourage you to review this page periodically.

13. Contact

For any questions or concerns about this Privacy Policy or the handling of your personal data, please contact:
Email: [email protected]
Phone: +66 2 285 6193
Address: 214 Rama III Road, Chong Nonsi, Yan Nawa, Bangkok 10120