Privacy note

Data controller

Mindtracegrid is the data controller for personal data collected through mindtracegrid.digital and through email or phone enquiries about programs. Contact: info@mindtracegrid.digital. Postal and phone details are listed verbatim on the contact page and in the footer.

We process personal data under Thailand’s Personal Data Protection Act B.E. 2562 (PDPA) and, where a participant is in another jurisdiction, we also consider that jurisdiction’s rules when they apply to the same processing.

What we collect

If you only browse, we may process technical logs (IP address, user agent, pages requested, approximate time) as needed to operate and secure the site. If you accept analytics cookies, we may also process aggregate page-use statistics. If you reject analytics cookies, we do not run that measurement.

If you submit the contact form or email us, we process your name, email address, optional topic, message content, and any files you attach. If you enrol, we additionally process billing details required for invoicing, seat names, and classroom attendance notes. We do not ask for national ID numbers for a standard seat.

If you bring a sandbox or production event list into studio, you remain the controller of that dataset. We act on your instructions for the duration of the critique and delete classroom copies according to the retention section below, unless you ask us in writing to keep a redacted example.

Why we process it

To reply to enquiries, to deliver programs you request, to issue invoices, to keep the site working, to defend legal claims, and — only with consent or another PDPA basis — to send occasional desk notes. We do not sell personal data. We do not use enquiry messages to train public machine-learning models.

Retention

Contact form messages and related email threads are kept for 24 months after the last reply, then deleted or archived in a reduced form if a legal hold applies. Invoices and accounting records are kept for the period Thai tax law requires. Classroom copies of your event lists are deleted within 31 days after the last scheduled session, unless you request a longer hold for office hours under a Cohort Bench or Atelier Year seat (maximum 90 days after the last office hour).

Server logs are rotated on a 90-day window. Cookie consent choices stored in your browser remain until you clear localStorage or change the choice.

Your rights

Subject to PDPA conditions, you may request access, correction, deletion, restriction, or a copy of personal data we hold about you, and you may object to certain processing. You may withdraw consent where processing is based on consent, without affecting prior lawful processing. To exercise rights, write info@mindtracegrid.digital with enough detail for us to locate the record. We may need to verify that we are speaking with you.

You may lodge a complaint with Thailand’s Personal Data Protection Committee. We would rather fix the issue directly; the right to complain remains yours.

International transfers

The desk is in Bangkok. Some processors (for example email hosting or font delivery) may store or access data outside Thailand. Where we transfer personal data abroad, we use contractual safeguards and limit the data to what the processor needs. Fonts and images loaded from public CDNs are requested by your browser; see the cookie note for third-party cookies those CDNs may set.

Children

Programs are aimed at working professionals. We do not knowingly collect personal data from children. If you believe we have, write the desk and we will delete it.

Changes

We will update this note when our processing changes. The date at the top will move. For material changes affecting enrolled participants, we will also email the address on the invoice.