Privacy Policy

1. Introduction

Garuda Tech ("we", "us", "our") is committed to handling personal information responsibly. This policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to it.

This policy applies to personal data collected through our website at garudaaq.biz and through our enrolment and programme delivery processes. It covers learners, prospective learners, and anyone who contacts us with an enquiry.

If you have questions about anything in this policy, contact us at [email protected].

2. Data we collect and how we collect it

We collect personal data in the following ways:

• Enquiry forms: name, email address, and optionally a phone number and message, when you submit a contact form on our website.
• Enrolment: name, email address, phone number, and invoicing information (for VAT invoice requests), when you enrol in a programme.
• Programme participation: work submitted as part of exercises and portfolio projects; questions and comments made in cohort channels or during live sessions.
• Website analytics: aggregated usage data (pages visited, session duration) collected via analytics tools, if you have consented to analytics cookies.

We do not collect sensitive personal data (health information, financial account details, government identification numbers) in the ordinary course of our operations.

3. Legal basis for processing

We process personal data on the following legal bases under the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand:

• Contract performance: processing necessary to deliver a programme you have enrolled in, or to respond to an enquiry you have made.
• Legitimate interests: improving the quality of our programmes based on aggregated feedback; maintaining records of past cohorts for curriculum development purposes.
• Consent: analytics cookies and any optional marketing communications. You can withdraw consent at any time.
• Legal obligation: retaining financial records for the period required under Thai tax law.

4. How we use personal data

• To respond to your enquiry and provide information about our programmes.
• To process your enrolment and manage your participation in a cohort.
• To issue invoices and financial records where applicable.
• To send you programme-related communications (session schedules, exercise materials, cohort updates).
• To improve our curriculum and delivery based on aggregated, anonymised feedback.
• To meet legal and regulatory obligations under Thai law.

We do not sell personal data to third parties. We do not use personal data for automated decision-making that has a legal or similarly significant effect on individuals.

5. Data sharing with third parties

We share personal data with third parties only in the following circumstances:

• Service providers: we use a small number of third-party tools to operate our programmes — including a video hosting platform for recorded sessions and a communication platform for cohort channels. These providers process data on our behalf under appropriate data processing terms.
• Analytics: if you have consented to analytics cookies, aggregated usage data may be processed by our analytics provider. This data is not linked to your name or email address.
• Legal requirements: we may disclose personal data to Thai government authorities or courts where required by law.

6. Data retention

• Enquiry data (name, email, message): retained for twelve months from the date of the enquiry, unless you enrol, in which case it becomes part of your enrolment record.
• Enrolment records: retained for five years from the end of the programme, to support curriculum review and to respond to any questions about participation.
• Financial records (invoices, payment records): retained for the period required under Thai tax law, currently seven years.
• Analytics data: aggregated and anonymised; not linked to individual records.

7. Data protection measures

We take reasonable technical and organisational steps to protect personal data from unauthorised access, disclosure, or loss:

• Data is transmitted over encrypted connections (HTTPS).
• Access to personal data is limited to staff members who need it to carry out their role.
• Third-party service providers are selected with data security in mind and are required to maintain appropriate security standards.
• In the event of a personal data breach that is likely to result in risk to affected individuals, we will notify those individuals and the relevant authority as required under the PDPA.

8. Cookies

Our website uses cookies. Essential cookies are required for the site to function and are set automatically. Optional cookies (analytics, preference) are set only if you consent. You can manage your cookie preferences at any time through our Cookie Policy page.

9. Your rights

Under the Personal Data Protection Act B.E. 2562 (PDPA), you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data, subject to our legal obligations to retain certain records.
• Right to data portability: to receive your personal data in a structured, machine-readable format where technically feasible.
• Right to object: to object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to lodge a complaint: with the Personal Data Protection Committee of Thailand (PDPC) if you believe your data has been processed unlawfully.

To exercise any of these rights, contact us at [email protected]. We will respond within thirty days of receiving a verifiable request.

10. Third-party links

Our website may contain links to external sites — for example, to documentation for tools covered in our courses. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies before submitting personal data to them.

11. Children's privacy

Our programmes are intended for adults with professional or educational backgrounds in software or data work. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, contact us at [email protected] and we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. The revised policy will be published at garudaaq.biz/privacy-policy.html with an updated date at the top. If we make material changes, we will notify current learners by email.

13. Contact

For questions, requests, or concerns related to your personal data:

• Email: [email protected]
• Address: Garuda Tech, 56 Soi Aree 4, Phaya Thai, Phaya Thai, Bangkok 10400, Thailand
• Phone: +66 2 384 5712