Effective Date: January 15, 2025
Last Updated: January 15, 2025

At burnonpwr, we believe transparency builds trust. This privacy policy explains how we collect, use, store, and protect your personal information when you interact with our website, educational programs, and services. We operate from Thailand and comply with applicable Thai data protection laws, including the Personal Data Protection Act B.E. 2562 (2019).

Information We Collect

We collect information in several ways when you use our services. Some information you provide directly to us, while other data we gather automatically through your interactions with our platform.

Personal Information You Provide

• Name, email address, and phone number when you register for programs or contact us
• Payment information and billing address when enrolling in paid courses
• Educational background and experience level for program customization
• Communication preferences and feedback through surveys or support interactions
• Professional information and career goals for personalized learning paths

Automatically Collected Information

• Device information including IP address, browser type, and operating system
• Usage data such as pages visited, time spent on site, and learning progress
• Cookies and similar technologies for site functionality and analytics
• Location data based on IP address for content localization
• Technical logs for security monitoring and system maintenance

How We Use Your Information

Your information helps us deliver better educational experiences and maintain our service quality. We use your data for specific, legitimate purposes that directly benefit your learning journey with us.

Purpose	Data Used	Legal Basis
Program delivery and support	Contact info, learning progress, preferences	Contract performance
Payment processing	Billing information, transaction records	Contract performance
Customer support	Contact details, communication history	Legitimate interest
Service improvement	Usage analytics, feedback	Legitimate interest
Marketing communications	Email, preferences, interests	Consent

Data Sharing and Third Parties

We don't sell your personal information. However, we do share data with trusted partners who help us deliver our services effectively. All third-party relationships include strict data protection agreements.

Service Providers We Work With

• Payment processors for secure transaction handling and billing services
• Cloud hosting providers for data storage and platform infrastructure
• Email service providers for course communications and updates
• Analytics platforms for understanding user behavior and improving our services
• Security services for fraud prevention and platform protection

Your Rights and Choices

Under Thai data protection law, you have several important rights regarding your personal information. We've made it easy for you to exercise these rights through our support channels.

Data Security and Protection

We implement comprehensive security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. Our security practices include both technical and organizational safeguards.

• End-to-end encryption for sensitive data transmission and storage
• Regular security audits and vulnerability assessments by independent experts
• Multi-factor authentication for administrative access to systems
• Employee training on data protection best practices and incident response
• Secure backup systems with redundancy across multiple geographic locations
• Network monitoring and intrusion detection systems operating 24/7

While we use industry-standard security measures, no online service can guarantee complete security. We continuously monitor for threats and update our protection methods as new technologies become available.

Data Retention Periods

We keep your information only as long as necessary for the purposes outlined in this policy or as required by applicable laws. Different types of data have different retention periods based on their purpose and legal requirements.

• Account information: Retained for 7 years after account closure for legal and tax purposes
• Learning progress and course data: Kept for 5 years to support continued education and certificates
• Payment records: Maintained for 7 years as required by Thai accounting regulations
• Marketing communications: Stored until you withdraw consent or 3 years of inactivity
• Support interactions: Kept for 2 years for quality assurance and issue resolution
• Technical logs and analytics: Automatically deleted after 13 months unless needed for security

International Data Transfers

As a technology-focused education provider, we may transfer your data internationally to provide our services effectively. When we do this, we ensure appropriate safeguards are in place to protect your information according to Thai data protection standards.

We work primarily with service providers in regions with adequate data protection laws, including the European Union, Singapore, and other jurisdictions recognized for strong privacy frameworks. Where transfers occur to countries without adequacy decisions, we implement additional safeguards such as standard contractual clauses.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, remember your preferences, and analyze site usage. You can control cookie settings through your browser preferences.

• Essential cookies for basic site functionality and security
• Performance cookies to understand how visitors use our website
• Functional cookies to remember your preferences and settings
• Marketing cookies to deliver relevant content and measure campaign effectiveness

Children's Privacy

Our services are designed for adults and professionals. We don't knowingly collect personal information from individuals under 18 years of age. If we discover we have inadvertently collected such information, we will delete it promptly.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We'll notify you of significant changes through email or prominent website notices at least 30 days before they take effect.

Minor changes or clarifications may be posted directly to this page with an updated "Last Modified" date. We encourage you to review this policy periodically to stay informed about how we protect your information.

Compliance and Oversight

We maintain compliance with the Personal Data Protection Act B.E. 2562 (2019) and other applicable Thai regulations. Our data protection practices are regularly reviewed by internal compliance teams and external auditors.

If you have concerns about our privacy practices that we haven't addressed satisfactorily, you may file a complaint with the Personal Data Protection Committee (PDPC) in Thailand or other relevant regulatory authorities.