Privacy Policy

This Privacy Policy outlines how Hub Orbit Base Co., Ltd. ("we", "us", or "our"), as data controller, collects, uses, stores, and protects personal data obtained from visitors, prospective students, and enrolled cohort participants through our website hub-orbitbase.click and in-person educational operations in Chiang Mai, Thailand.

1. Data Controller Identification

The legal entity responsible for the processing of your personal data is:

2. Categories of Personal Data Collected

We collect only the minimum necessary information required to evaluate course applications, manage cohort admissions, and provide student support:

• Admissions & Inquiry Data: Full name, email address, telephone number, self-reported market analysis experience level, and educational training objectives.
• Enrollment Records: Invoicing details, cohort attendance records, course completion status, and diagnostic homework submissions.
• Technical & Browsing Data: IP address, browser type, operating system, pages viewed, and anonymized session duration via privacy-compliant analytics.

3. Legal Basis and Purposes of Processing

We process your personal information under the following legal grounds recognized under the Thailand Personal Data Protection Act (PDPA) B.E. 2562 (2019) and the European General Data Protection Regulation (GDPR):

• Contractual Performance: To process admissions, coordinate workshop scheduling, deliver course materials, and communicate critical timetable updates.
• Legitimate Interests: To maintain educational quality, evaluate curriculum effectiveness, protect our website from abusive spam requests, and respond to inquiries.
• Legal Compliance: To maintain statutory accounting and tax records required under Thai corporate law.

4. Data Retention Period

Admissions inquiry details for applicants who do not enroll are retained for a maximum of 12 months before being securely purged. Student academic records, completion certificates, and billing invoices are retained for 5 years in compliance with statutory Thai tax and corporate record-keeping mandates.

5. International Data Transfers

Where third-party service providers (such as secure cloud email infrastructure or video conferencing channels) process data across international borders, we ensure adequate data protection safeguards are in place in conformity with applicable data protection laws.

6. Your Data Subject Rights

Under applicable data privacy regulations, you possess the right to:

• Request access to the personal data we hold about you.
• Request the correction of inaccurate or incomplete personal records.
• Request the erasure of your personal data ("right to be forgotten"), subject to statutory tax retention constraints.
• Object to or request restriction of certain processing activities.
• Withdraw your consent at any time where processing was based on consent.

To exercise any of these rights, please contact our data protection coordinator at info@hub-orbitbase.click. We respond to all formal requests within 30 calendar days.