Privacy Notice

This notice explains how AC Academys collects, uses and discloses the personal data of website visitors, applicants and learners, under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

• Account data: name, email, password (stored hashed), chosen language.
• Learning data: courses you enrol in, progress, quiz results, work you hand in, questions and reviews you write.
• Order and payment data: order lines, amounts, the transfer slip you attach, and name and tax id if you ask for a tax invoice.
• Certificate data: recipient name, course, issue date and certificate number.
• Technical data: IP address, browser type and logs kept for security and fixing problems.
• Cookies: as described in the Cookie Policy.

We do not ask for sensitive data under section 26 of the PDPA (such as health or religious data) when you sign up or buy. If you choose to put such data in work you hand in or a question you ask, that disclosure is your own decision.

• To create and run your account, give you access, record progress and issue certificates — contract.
• To take payment, check slips, issue receipts or tax invoices and keep accounting records — contract and legal obligation.
• To send emails the service needs, such as email verification, password reset and order status — contract.
• To keep the system secure and prevent fraud — legitimate interest.
• To analyse website use through analytics cookies, and to send news that the service does not need — consent, which you can withdraw at any time.

• Staff of AC Academys and the instructors of the courses you enrol in, as far as teaching and marking need.
• Providers that help us run the system, such as infrastructure, file storage and email delivery. They act on our instructions and must keep the data secure.
• Public authorities where the law requires it or a lawful order is made.

We do not sell your personal data and we use no advertising cookies.

• Account and learning data: while the account is active, until you ask us to delete it.
• Accounting records (orders, receipts, slips): for the period Thai accounting and tax law require, which is not less than 5 years.
• Certificates and verification records: kept so that others can verify a certificate even if you close your account.
• When the period ends we delete the data or make it anonymous.

Some providers may process or store data outside Thailand. Where data leaves Thailand, we make sure the recipient gives personal data an adequate standard of protection as the PDPA requires.

• Ask to access and receive a copy of your data.
• Ask us to correct inaccurate data.
• Ask us to delete or destroy data, or to restrict its use.
• Object to our collecting, using or disclosing data.
• Ask us to transfer data you gave us to another controller.
• Withdraw consent at any time, without affecting what was done before you withdrew.

Send your request to support@acacademys.com. We reply within 30 days of receiving it. Some rights have legal exceptions, for example where we must keep accounting records by law; we will tell you the reason.

If you believe we have breached the PDPA you may complain to the Personal Data Protection Committee Office. We would be glad to hear from you first at support@acacademys.com.

If a learner is under 20, we ask a parent or guardian to know about and consent to the sign-up. For a learner under 10 the person with parental authority must give the consent, as the PDPA requires.

We use appropriate security measures such as hashed passwords, encrypted connections and limited staff access. If a personal data breach occurs that carries risk, we will notify as the law requires.

When something important changes we will update the version and effective date on this page and tell you.