Privacy Policy

1. Who We Are

Nablalab is an online AI education provider based in Ayutthaya, Thailand. Our contact details are:

• Address: 22 U Thong Road, Pratu Chai, Ayutthaya 13000, Thailand
• Phone: +66 35 276 941
• Email: [email protected]

2. Information We Collect

We may collect the following types of personal information:

• Contact information — name, email address, and phone number when you fill in an enquiry form.
• Communication records — messages you send us by email or through our contact form.
• Usage data — pages visited, time on site, browser type, and approximate location, collected automatically via analytics tools when you browse our website.
• Cookie data — preferences and session information stored on your device. See our Cookie Policy for details.

We do not collect sensitive personal data such as payment card numbers, national identification numbers, or health information through this website.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Responding to enquiries and providing information about our educational programmes.
• Processing enrolments and managing your learner account, if applicable.
• Sending relevant updates about course schedules, curriculum changes, or new programmes, where you have given consent.
• Improving our website content and user experience through aggregated, anonymised analytics.
• Complying with applicable legal obligations under Thai law and international data protection standards.

We do not use your personal information to build advertising profiles or sell it to third parties.

4. Legal Basis for Processing

We process your personal data on the following grounds:

• Your consent — for marketing communications and optional analytics cookies.
• Legitimate interests — for operating our platform and improving our services in ways that do not override your rights.
• Contractual necessity — for handling enrolment and delivering the programmes you sign up for.
• Legal obligation — where Thai law or other applicable regulations require us to retain or disclose data.

5. Sharing Your Information

We may share your information with:

• Service providers — such as email delivery platforms and analytics tools that process data on our behalf under confidentiality agreements.
• Mentors and programme coordinators — to facilitate learning and support within the programme you have enrolled in.
• Legal authorities — where required by law, court order, or regulatory obligation.

We do not sell, rent, or trade your personal data to any third parties for their own marketing purposes.

6. How Long We Keep Your Data

We retain personal data only as long as necessary for the purposes described in this policy:

• Enquiry records: up to 24 months after the last contact, unless a longer period is required by law.
• Learner records: for the duration of your enrolment plus up to 36 months thereafter, to support any follow-up questions about your experience.
• Analytics data: in aggregated, anonymised form for up to 26 months.

After these periods, data is securely deleted or anonymised.

7. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. These include encrypted data transmission, access controls, and regular security reviews.

However, no method of electronic transmission or storage is entirely free of risk. If you have concerns about the security of your data, please contact us at [email protected].

8. International Transfers

Our primary operations are based in Thailand. Some of our service providers (such as analytics and email platforms) may process data in other countries. Where this occurs, we take steps to ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections.

9. Your Rights

Depending on applicable law, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal obligations.
• Object to or restrict certain types of processing.
• Withdraw consent at any time, where processing is based on consent.
• Receive a copy of your data in a portable format.

To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe in accordance with applicable law.

10. Cookies

We use cookies and similar tracking technologies to operate our website and understand how it is used. You can manage your cookie preferences at any time. For full details, please read our Cookie Policy.

11. Minors

Our programmes and website are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data to us, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make changes, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acknowledgement of the updated policy.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy, please contact us:

• Email: [email protected]
• Phone: +66 35 276 941
• Post: 22 U Thong Road, Pratu Chai, Ayutthaya 13000, Thailand