Privacy Policy

1. Introduction

Setthi Code ("we", "us", "our") is committed to handling the personal data of anyone who contacts us, enquires about our programmes, or participates in our courses in a way that is transparent, proportionate, and consistent with applicable Thai data protection law.

This policy explains what personal data we collect, how we collect it, how we use it, how long we keep it, and what rights you have in relation to it. It applies to data collected through our website at setthic.live, through our contact form, and through direct correspondence by email or telephone.

If you have questions about this policy or about how we handle your data, please contact us at [email protected] or by post at 143/8 Convent Road, Si Lom, Bang Rak, Bangkok 10500, Thailand.

2. What personal data we collect and how

We collect personal data in the following ways:

Contact form: When you submit an enquiry through our website, we collect your name, email address, and any information you choose to include in the message field. Phone number is optional and collected only if you choose to provide it.

Direct correspondence: When you contact us by email or telephone, we collect the information you provide and may retain records of that correspondence.

Programme enrolment: If you enrol in one of our programmes, we collect the information necessary to administer your enrolment and to deliver the programme — name, email, payment information, and, where relevant, the name of your employer for invoicing purposes.

Cookies and analytics: We may use analytics tools to understand how our website is used. Any data collected for this purpose is used in aggregate and anonymised form. See our Cookie Policy for details.

Legal basis for processing:

• Consent — where you have given explicit consent, for example by submitting an enquiry form or agreeing to marketing communications.
• Legitimate interest — for example, retaining records of correspondence for the purpose of following up an enquiry.
• Performance of a contract — where data processing is necessary to administer an enrolment and deliver a programme.

Retention: Enquiry and contact data is retained for up to 12 months unless you request deletion earlier or unless a longer retention period is required by applicable law. Programme enrolment data is retained for up to 5 years after the conclusion of the programme for administrative and legal compliance purposes.

3. How we use personal data

We use personal data for the following purposes:

• To respond to enquiries submitted through our contact form or by email or telephone.
• To administer programme enrolments, issue invoices, and deliver programme content.
• To communicate with you about your enrolment, upcoming cohorts, or changes to programme schedules.
• To improve our website and programmes using aggregate, anonymised usage data.
• To comply with applicable legal and regulatory requirements.

Marketing communications: We do not send unsolicited marketing emails. If we send you information about future programmes or events, we will do so only with your explicit agreement or in accordance with applicable law. You may withdraw that agreement at any time by contacting us at [email protected].

Third-party sharing: We do not sell, rent, or trade personal data with third parties. We may share data with service providers who assist in operating our website or delivering our programmes — for example, payment processors or email service providers — under agreements that restrict those providers to using the data only for the purpose for which it was shared.

4. How we protect personal data

We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• Secure, encrypted connections (HTTPS) for data transmitted through our website.
• Access controls limiting who within our organisation can access personal data.
• Regular review of our data handling practices.

In the event of a data breach that is likely to result in a risk to your rights or freedoms, we will notify you and any relevant supervisory authority in accordance with applicable law and as promptly as reasonably practicable.

5. Cookies

We use cookies on our website for essential functionality and, where you have consented, for analytics purposes. For a full explanation of the cookies we use and how to manage your preferences, please see our Cookie Policy.

6. Your rights

In accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (PDPA) and other applicable law, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate or incomplete data.
• Right to erasure: You may ask us to delete your personal data, subject to any legal obligations that require us to retain it.
• Right to data portability: Where technically feasible, you may request that we provide your data in a structured, commonly used format.
• Right to object: You may object to processing based on legitimate interest, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving a verifiable request.

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand.

7. Third-party links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites, and this policy does not apply to data collected by third parties. We encourage you to review the privacy policies of any external sites you visit.

8. Children's privacy

Our programmes are designed for working adults and are not directed at anyone under the age of 18. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently received data from a minor, please contact us at [email protected] so that we may delete it.

9. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the date at the top of this page. If changes are material, we will communicate them to current programme participants by email. Continued use of our website or our services after a policy update constitutes acceptance of the revised policy.

10. Contact for data-related enquiries

For questions about this policy or about how we handle your personal data, please contact us: