Privacy Policy

1. Introduction

Codexis ("we", "us", "our") is committed to handling your personal data with care and transparency. This Privacy Policy explains what information we collect when you visit our website or enrol in one of our learning tracks, how we use it, and what rights you have over it.

Our registered address is 47 Nimmanhaemin Soi 11, Suthep, Mueang, Chiang Mai 50200, Thailand. Questions about this policy can be directed to [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact form: Name, email address, and optionally phone number and a written message when you submit an enquiry.
• Enrolment: Name, email, and payment confirmation data when you register for a course.
• Course platform: Submitted exercises, messages to mentors, and progress data within the learning platform.
• Website analytics: Anonymised usage data (pages visited, session duration) if you have consented to analytics cookies.
• Cookies: Session, analytics, and preference cookies as described in our Cookie Policy.

We do not collect sensitive personal data (health information, financial account details beyond payment processing, or government identity numbers).

3. Legal Basis for Processing

We process personal data on the following legal grounds under applicable Thai data protection law (PDPA, B.E. 2562) and where applicable, GDPR principles for international visitors:

• Consent: For analytics cookies and marketing communications, where you have opted in.
• Contract: To fulfil a course enrolment or respond to a direct enquiry you have submitted.
• Legitimate interest: For internal improvement of course content and platform performance, balanced against your privacy interests.

4. How We Use Your Data

• Responding to enquiries submitted through the contact form
• Processing enrolments and providing course access
• Delivering mentor feedback on submitted exercises
• Sending course-related updates and support communications
• Improving course content and platform based on aggregated usage patterns
• Complying with legal obligations under Thai law

We do not use your personal data for automated decision-making that produces legal or significant effects on you.

5. Data Retention

We retain personal data for the following periods:

• Enquiry data (contact form submissions): 12 months from receipt
• Enrolment and course data: for the duration of active enrolment, plus 3 years for administrative records
• Analytics data: anonymised or deleted after 26 months

After the applicable retention period, data is deleted or anonymised.

6. Data Sharing

We do not sell your personal data. We may share data with:

• Payment processors: Secure third-party services that handle course payment transactions. These providers have their own privacy policies.
• Analytics providers: Anonymised data may be processed by Google Analytics or similar tools if you have consented to analytics cookies.
• Legal authorities: If required by Thai law or a lawful court order.

Course submissions and personal communications with mentors are not shared outside Codexis.

7. Data Security

We use technical and organisational measures appropriate to the nature of the data we hold, including:

• HTTPS encryption for all data transmitted to and from our website
• Access controls limiting who within the team can view personal data
• Regular review of data handling practices

No system is entirely immune to breach. In the event of a data breach affecting your rights, we will notify you and the relevant authority as required by Thai PDPA.

8. Cookies

We use cookies for essential site functionality, analytics (with your consent), and preference storage. For full details on the cookies we use and how to manage them, see our Cookie Policy.

9. Your Rights

Under the Thai Personal Data Protection Act (PDPA) and applicable law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data where no legal basis for retention applies
• Portability — receive your data in a structured, commonly used format
• Objection — object to processing based on legitimate interest
• Withdraw consent — at any time, for data processed on the basis of consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand if you believe your data has been handled unlawfully.

10. Third-Party Links

Our website may contain links to external resources and documentation. We are not responsible for the privacy practices of third-party websites. We recommend reviewing their privacy policies before submitting personal data to them.

11. Children's Privacy

Our courses are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that data from a minor has been submitted, we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of our website or services after a change constitutes acceptance of the updated policy.

13. Contact

Data controller: Codexis
47 Nimmanhaemin Soi 11, Suthep, Mueang, Chiang Mai 50200, Thailand
Email: [email protected]
Phone: +66 53 281 364