Privacy Policy

Mind Orbit Point Training Studio Co., Ltd. ("Mind Orbit Point," "we," "us") is dedicated to safeguarding your personal data and respecting your privacy rights. This Privacy Policy explains how we collect, process, store, and protect personal data collected through our website at mindorbitpoint.click and during our in-person and virtual technical analysis training sessions.

1. Data Controller Identification

The Data Controller responsible for your personal information under the Thailand Personal Data Protection Act B.E. 2562 (2019) is:

2. Categories of Personal Data We Collect

We collect only the minimum personal information required to deliver training programs and coordinate clinic bookings:

• Contact Information: Name, email address, telephone number, and residential city/country.
• Training Intake Details: Current market experience level, charting software used, timeframes analyzed, and training goals.
• Communication Records: Written feedback, email correspondence, and diagnostic clinic session notes.
• Technical & Browsing Data: Anonymous IP address logs, browser type, and cookie interaction data (see our Cookie Policy).

3. Legal Grounds & Purposes of Processing

We process your personal information under the following legal bases:

• Contractual Performance: To register you for workshops, conduct 1-on-1 diagnostic sessions, issue course materials, and provide ongoing mentorship.
• Legitimate Interests: To improve our course curriculum, maintain studio security, and respond to inquiries.
• Consent: Where you have opted in to receive technical analysis newsletters or educational updates.
• Legal Compliance: To maintain required financial, accounting, and tax records in Thailand.

4. Data Retention Periods

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected. Clinic intake forms and student feedback notes are retained for three (3) years following program completion to support longitudinal student reviews. Accounting and billing records are retained for five (5) years in accordance with Thai statutory accounting obligations.

5. International Data Transfers

Where we utilize secure cloud service providers (such as encrypted video conference portals or secure email servers) located outside Thailand, we ensure adequate cross-border transfer protections compliant with PDPA standards, including standard contractual clauses and end-to-end encryption.

6. Your Rights Under Thai PDPA

You have the right to exercise any of the following statutory data subject rights:

• Right of Access: Request a copy of personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your data when no longer required for legal or contractual grounds.
• Right to Restriction: Request restriction of processing under certain legal conditions.
• Right to Data Portability: Request transfer of your data in a structured, machine-readable format.
• Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing.

7. Submitting Data Subject Requests

To exercise your privacy rights, please submit a written request to our Data Protection Officer at info@mindorbitpoint.click or write to our office address in Chiang Mai. We will verify your identity and respond within thirty (30) calendar days.