Privacy and data use

Definitions

To help readers apply this policy to real-life situations, the following definitions are given with short examples that reflect common training center interactions: registrations, instructor assessments, employer verifications and technical support scenarios.

Purposes of processing

We only process data for specific, explicit purposes related to course administration, assessment, billing, communications and service improvement. Each purpose is linked to practical scenarios to clarify necessity and scope.

• Course enrollment and participant management — e.g., registering a trainee for a specific upskilling module and recording attendance.
• Certification and assessment administration — e.g., grading an assignment and issuing a certificate with the trainee's verified name and completion date.
• Billing and accounting — e.g., issuing invoices to a company (Business ID 4594865752682) and tracking payment status.
• User support and dispute resolution — e.g., contribute a reported exam access problem using logs and correspondence.
• Service improvement and analytics — e.g., analyzing completion rates across cohorts to refine course structure and materials.
• Security and fraud prevention — e.g., detecting unusual login patterns to protect accounts and the integrity of assessments.
• Regulatory and legal compliance — e.g., retaining records required by local education regulators or tax authorities for auditing.
• Marketing and communications (with consent) — e.g., sending information about relevant new courses when a user has opted in.

Legal basis for processing

For each processing activity we identify the legal basis that applies. Where consent is relied upon, examples show how consent is collected and how it can be withdrawn in practice.

• Performance of a contract: processing required to enroll and deliver courses when you register for a paid or free program.
• Legal obligation: retention of certain records for tax or regulatory compliance as required by Thai law.
• Legitimate interests: limited analytics and fraud prevention activities that preserve user privacy while protecting platform operations.
• Consent: where we send marketing communications or use non-essential cookies, we ask for clear consent and record the response.

Cookies and similar technologies

We use cookies to support core website functions and to analyze usage patterns. This section explains types of cookies, their purposes, and practical steps you can take to manage them.

Cookie types include essential cookies for login and session management, analytics cookies to measure course engagement, and optional advertising cookies used only with explicit consent.

Categories: essential (required for delivery of services), performance/analytics (aggregate usage metrics), preference (interface settings), and marketing (delivered with consent).

You can manage cookie preferences through the cookie banner on aeropreneurl.click or via browser settings. Example: disabling analytics cookies will not prevent course access but will limit personalized recommendations.

Full cookie policy and preference center available at https://aeropreneurl.click/cookies

How we share data

Sharing is limited to partners necessary to deliver the service, such as payment processors, certification bodies, and corporate sponsors. Each sharing case includes practical safeguards and examples of how shared data is used.

• With payment processors to complete transactions; shared data is limited to what is necessary for payment reconciliation and fraud checks.
• With employers or corporate clients (on request) to provide progress reports for their enrolled staff, limited to agreed scopes.
• With certification authorities or external assessors to validate exam results and issue official credentials.
• With service providers (hosting, analytics, support platforms) that process data under contract and are instructed to follow our data protection standards.
• With legal or regulatory authorities when required under Thai law or to respond to lawful requests; disclosure is limited to the specific request.
• With potential acquirers or advisors in the event of a business transaction, where we ensure confidentiality and limit data transfer to necessary due diligence materials.

International transfers

Data may be transferred to service providers located outside Thailand when necessary for course delivery or technical support. Transfers are governed by contractual safeguards and appropriate technical measures to protect data in transit.

When transferring data internationally we use standard contractual clauses, provider audits, and encryption measures to maintain safeguards comparable to those applied in Thailand.

Data retention

Retention periods are determined by the purpose for which data was collected, legal requirements, and operational needs. Below are typical retention periods with example scenarios to clarify when data is kept or removed.

Account records and profile information are retained while the account is active and for a reasonable period thereafter to address disputes or compliance obligations; for example, business clients' records may be kept for a minimum period required for accounting.

Support communications and correspondence are retained for a period sufficient to resolve the issue and to analyze recurring problems; typical retention is aligned with operational case closure timelines.

Security logs and access records are retained for a limited period to support incident contribute and to detect patterns of misuse; retention balances contribute needs and privacy considerations.

When data is no longer needed for its original purpose and no legal reasons to retain remain, we delete or anonymize it. Example: anonymized engagement metrics may be retained indefinitely for aggregated reporting, while personal identifiers are removed.

Your rights and how to exercise them

You can exercise your rights by contacting aeropreneurl. We describe practical steps and provide examples of typical requests and expected response workflows, including handling timeframes and verification steps.

• Access: Submit a request via contact channels to obtain a copy of the personal data we hold about you. Example: requesting training records for the last two years.
• Rectification: Provide corrective information and supporting documents if necessary to update inaccurate data such as a misspelled name on a certificate.
• Erasure: Request deletion where retention is no longer necessary and no legal obligations to retain exist; we will evaluate the request and describe applicable exceptions.
• Restriction: Ask to limit processing while a dispute about accuracy or lawful basis is resolved; example: pausing use of disputed exam results until verified.
• Data portability: Request your personal data in a commonly used format for transfer to another service provider; we provide examples of the export format and fields included.
• Objection: Object to processing based on legitimate interests; we will review the objection and explain the outcome and any necessary adjustments.
• Withdraw consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time via preferences on aeropreneurl.click or by contacting our data protection officer.
• Right to withdraw consent for processing related to direct marketing, subject to local law and existing contractual obligations.

How to exercise your privacy rights

To submit a request concerning access, correction, deletion, restriction, portability or objection to processing of your personal data collected by aeropreneurl, contact our data protection team with a clear description of your request and a preferred contact method. Include identifying details so we can verify your identity. We evaluate each request against applicable Thai law and legitimate business reasons before taking action.

[email protected]

We aim to acknowledge receipt of privacy requests within 7 business days and respond with a resolution or status update within 30 calendar days, unless additional time is required under local law or for identity verification.