Privacy Policy

1. Introduction

Modelcraft ("we", "us", "our") is an AI development school based at 52 Thalang Road, Talat Yai, Muang, Phuket 83000, Thailand. We operate learning tracks online and, where applicable, in person at our Phuket location.

This Privacy Policy describes how we collect, use, store, and protect personal data when you use our website at modelcraft.biz, enrol in a learning track, or contact us. It also sets out your rights regarding the data we hold.

If you have questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact forms: Name, email address, and optionally phone number and message content.
• Enrolment: Name, email address, phone number, and payment details processed through our payment provider.
• Track submissions: Code, written assignments, and forum posts submitted as part of a learning track.
• Analytics: Page views, session duration, and device information collected via analytics tools.
• Cookies: Preference data, session identifiers, and analytics identifiers. See our Cookie Policy for details.

Legal basis for processing: We process data on the basis of your consent (for optional communications and analytics), contract performance (for track enrolment and delivery), and legitimate interest (for site security and improvement).

Retention: Contact form data is retained for 12 months. Enrolment and track submission data is retained for 36 months after your last enrolment. Analytics data is retained for 14 months.

3. How We Use Your Data

We use the data we collect to:

• Respond to enquiries submitted via contact forms.
• Process enrolments and deliver track content.
• Provide mentor access, forum participation, and assignment reviews.
• Send transactional communications related to your enrolment (receipts, session confirmations, track updates).
• Send optional programme updates and cohort announcements (where you have consented).
• Improve the website and track materials using aggregated analytics data.
• Comply with legal obligations under Thai law and applicable data protection regulations.

We do not sell personal data to third parties. We do not use personal data for behavioural advertising.

4. Third-Party Services

We use the following third-party services which may process personal data on our behalf:

• Payment processing: Handled by a PCI-DSS compliant payment provider. We do not store card details.
• Analytics: Google Analytics 4 for aggregated website usage data.
• Email delivery: Transactional emails sent via a third-party email delivery service.
• Cloud hosting: Website and learner data hosted on servers located in Southeast Asia.

These providers process data only as necessary to provide the services, under data processing agreements where applicable.

5. Data Protection Measures

• All data transmitted between your browser and our website is encrypted using TLS.
• Access to learner data is restricted to staff directly involved in delivering the relevant track.
• Data is stored on servers with access logging and regular security reviews.
• In the event of a data breach affecting your personal data, we will notify affected individuals within 72 hours of becoming aware of the incident, where required by law.

6. Cookies

We use essential cookies necessary for the website to function, and optional analytics and preference cookies. You can manage your cookie preferences through our cookie consent tool or via your browser settings. For full details, see our Cookie Policy.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interest.
• Withdrawal of consent: Withdraw consent for optional processing at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you are based in Thailand, the Personal Data Protection Act B.E. 2562 (PDPA) applies. If you are based in the European Union or European Economic Area, the GDPR applies. You may also lodge a complaint with your local supervisory authority.

8. Third-Party Links

Our website may contain links to external websites, libraries, or tools. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

9. Children's Privacy

Our tracks and services are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that a person under 18 has submitted data to us, we will delete it promptly. If you have reason to believe a minor has submitted data, please contact us at [email protected].

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Where changes are significant, we will notify enrolled learners via email. Continued use of the website after changes are published constitutes acceptance of the updated policy.

11. Contact Us

Data controller: Modelcraft

Address: 52 Thalang Road, Talat Yai, Muang, Phuket 83000, Thailand

Privacy enquiries: [email protected]

General enquiries: [email protected]

Phone: +66 76 384 5092