Legal
Privacy Policy
Last updated: 3 June 2026 ยท Effective: 3 June 2026
Witcha Code ("we", "us", "our") operates an online AI and programming education school based at 210 Chang Lo Road, Bangkok Noi, Bangkok 10700, Thailand. This policy explains how we collect, use, and protect personal information in connection with our website and our learning tracks.
If you have questions about anything in this document, please contact us at [email protected].
1. What information we collect
When you use our contact form or enquire about a track, we collect:
- Your name
- Email address (required)
- Phone number (if you choose to provide it)
- Any message content you submit
When you enrol in a track, we additionally collect:
- Payment confirmation information (processed via a third-party payment provider โ we do not store card numbers)
- Code submissions and project files you send to your mentor
- Correspondence between you and our team
We also collect standard website data through analytics tools: pages visited, approximate location (country/city), device type, and session duration. This data is not linked to individuals unless you are logged into an account.
2. How we use your information
We use the information we collect to:
- Respond to your enquiries
- Manage your enrolment and provide access to track materials
- Facilitate communication between you and your assigned mentor
- Send administrative updates about your track (start dates, schedule changes)
- Improve the content and structure of our tracks based on learner feedback
We do not use your information for automated marketing or profiling. If we send any optional newsletter communications, you will have opted in explicitly and can withdraw consent at any time.
Legal basis (PDPA โ Thailand): Processing is based on contractual necessity (for enrolled learners), legitimate interest (for analytics and service improvement), and consent (for optional communications). Thailand's Personal Data Protection Act B.E. 2562 (2019) applies to data we process about individuals in Thailand.
3. How long we keep your data
- Enquiries (not enrolled): 12 months from the date of contact
- Enrolled learner records: 3 years after track completion
- Payment records: 7 years (Thai Revenue Code requirement)
- Website analytics: 26 months (standard Google Analytics retention)
After the applicable period, data is deleted or anonymised.
4. Data sharing
We do not sell personal data. We share data with third parties only in these circumstances:
- Payment processors: When you pay for a track, your payment is processed by a PCI-DSS compliant third party. We receive confirmation but not card details.
- Analytics providers: We use Google Analytics to understand website usage. Google may process session data according to their own privacy terms.
- Legal requirements: We may disclose data if required by Thai law or a court order.
Code submissions and mentor correspondence are visible only to you and your assigned mentor. They are not shared with other learners or with outside parties.
5. Cookies
We use cookies for:
- Essential cookies: To keep the site functioning (session management, cookie consent preference)
- Analytics cookies: To understand how the site is used (optional, requires consent)
You can manage cookie preferences via the banner shown on your first visit or at any time on our Cookie Policy page.
6. Data security
We take reasonable technical and organisational measures to protect personal data. These include:
- HTTPS encryption on all pages
- Access to learner data limited to assigned mentors and administrative staff
- Regular review of who has access to stored data
No transmission over the internet is completely secure. If you believe your data has been involved in an incident, please contact us at [email protected] promptly.
7. Your rights under Thai PDPA
Under Thailand's Personal Data Protection Act, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Ask us to correct inaccurate data
- Erasure: Request deletion of your data in certain circumstances
- Restriction: Ask us to restrict processing while a dispute is resolved
- Data portability: Receive your data in a structured, common format
- Object: Object to processing based on legitimate interest
- Withdraw consent: Where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, email [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you may file a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.
8. Links to other websites
Our website may link to external sites (such as documentation for open-source tools). We are not responsible for the privacy practices of those sites. We encourage you to review their policies separately.
9. Children's privacy
Our tracks are designed for adults. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have received data from a minor, please contact us immediately at [email protected] so we can delete it.
10. Changes to this policy
We may update this policy from time to time. When we do, the "Last updated" date at the top will change. We will notify enrolled learners of material changes by email. Continued use of our site after changes are posted constitutes acceptance of the updated policy.
11. Contact
For privacy-related questions or to exercise your data rights:
- Email: [email protected]
- Address: Witcha Code, 210 Chang Lo Road, Bangkok Noi, Bangkok 10700, Thailand
- Phone: +66 53 692 174