Privacy Policy

1. Introduction

Cogito ("we", "us", "our") operates an online AI development school accessible at cogiton.biz. This Privacy Policy describes how we collect, use, and protect personal information from people who visit our website, enquire about courses, and enrol as students.

We are based in Chiang Mai, Thailand, and operate under the Personal Data Protection Act B.E. 2562 (PDPA). We process personal data with care and do not share it with third parties for advertising or marketing purposes.

Questions about this policy can be directed to [email protected].

2. Data We Collect

Information you give us directly

• Name and email address (from the contact form)
• Phone number (optional, from the contact form)
• Message content submitted through our forms
• Payment information (processed by our payment provider; we do not store card details)

Information collected automatically

• IP address and general location (country/city level)
• Browser type and device information
• Pages visited and time spent on site (via analytics cookies, if consented)

Legal basis for processing (PDPA)

• Consent – analytics cookies, marketing communications (opt-in only)
• Contractual necessity – processing enquiries and managing enrolment
• Legitimate interest – improving the website and course quality

3. How We Use Your Data

• Responding to enquiries and providing course information
• Managing your enrolment and providing access to course materials
• Sending course-related communications (schedules, Q&A reminders, assignment feedback)
• Sending occasional updates about Cogito courses, if you have opted in
• Improving website usability through aggregated analytics
• Complying with legal obligations

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Data retention

Enquiry records are retained for 12 months. Enrolment and payment records are retained for 5 years for accounting purposes. Analytics data is retained for 26 months. You may request deletion at any time (see Your Rights below).

4. Data Protection

• Data is stored on servers with HTTPS encryption in transit
• Access to personal data is restricted to staff with a direct operational need
• Payment processing is handled by a certified payment provider; we do not store card data
• In the event of a data breach affecting your personal data, we will notify you within 72 hours where required by applicable law
• We review our data handling practices at least annually

5. Cookies

We use cookies to make the site function and, with your consent, to understand how visitors use the site. Essential cookies (required for basic site operation) are always active. Analytics and preference cookies are only set if you accept them.

For full details see our Cookie Policy.

6. Your Rights (PDPA)

Under Thailand's Personal Data Protection Act, you have the right to:

• Access – request a copy of the personal data we hold about you
• Rectification – ask us to correct inaccurate or incomplete data
• Erasure – request deletion of your data where there is no lawful basis for continued processing
• Portability – receive your data in a structured, machine-readable format where technically feasible
• Objection – object to processing based on legitimate interest
• Withdrawal of consent – withdraw consent for analytics or marketing communications at any time
• Complaint – lodge a complaint with the Office of the Personal Data Protection Committee (PDPC Thailand)

To exercise any of these rights, email [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external sites (documentation, resources, tools). We are not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies before providing any personal information.

8. Children's Privacy

Cogito's courses are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will delete it promptly.

9. Changes to This Policy

We may update this policy periodically. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of the site after changes are posted constitutes acceptance of the updated policy.

For significant changes affecting how we handle your personal data, we will notify enrolled students by email.

10. Contact the Data Controller

Cogito is the data controller for personal data collected through this website.