Privacy Policy Overview

Key definitions

This section explains terms used in the policy, such as 'personal data', 'processing', and 'data controller', to help you understand how your information is handled.

Personal data means any information that can identify a living individual, such as name, contact details, identification numbers, education and employment history. For participants in golexora professional development courses, this includes information you provide when registering and any records created during course delivery. We treat such data with care to enable course enrollment, communication and certification processes.

Processing refers to any operation performed on personal data, including collection, recording, organization, structuring, storage, retrieval, consultation, use, disclosure, transmission, restriction, erasure and destruction. golexora processes data to manage course applications, deliver training, assess outcomes and maintain administrative records in compliance with applicable law.

User means any individual who visits golexora.info, registers for courses, requests information, or otherwise interacts with golexora services. Users include prospective students, enrolled participants, employers and partners who engage with our professional development programs in Thailand and remotely.

Service refers to the suite of professional development courses, workshops, certification preparation and related support services offered by golexora at golexora.info. Services cover in-person events held at our Thailand address and online learning activities, assessment and administrative support.

Cookies are small text files placed on your device by a website to improve functionality, remember preferences and collect anonymized information about site usage. golexora uses cookies to enable a smooth registration experience and to analyze how visitors use our site to improve course offerings.

Data collection and use

We collect information that is necessary to register you for courses, communicate about schedules and materials, process payments and provide student support. Collection is limited to data required for these purposes and is handled securely in line with data protection principles.

Purposes of processing

We process personal data for specific, limited and legitimate purposes related to course provision and student services. Each purpose relies on a lawful basis and is balanced against your privacy interests.

• Course administration: to register participants, manage schedules, issue certificates and administer assessments.
• Customer support: to respond to inquiries, resolve issues and provide guidance on course selection or technical access.
• Payment and billing: to process course fees, issue invoices and maintain accurate business records in coordination with our payment partners.
• Legal and regulatory compliance: to retain records required by Thai authorities or accrediting bodies and to respond to lawful requests.
• Operational improvement: to analyze aggregated usage data to refine curriculum, scheduling and platform usability.
• Safety and security: to detect and prevent fraud, unauthorized access and other security risks.
• Marketing and communications: to send optional course recommendations, updates and special offers when you have consented to receive them.
• Research and reporting: to compile anonymized statistics about course outcomes, participation trends and learner satisfaction for internal planning.

Legal Bases for Processing

We rely on appropriate legal bases to process personal data, such as contractual necessity, consent, legitimate interests and compliance with legal obligations. The basis depends on the processing activity.

• Contract performance: processing necessary to fulfill the course enrollment contract and provide requested training services.
• Consent: when you opt in to receive marketing communications or optional data processing beyond course delivery.
• Legitimate interests: for activities such as fraud prevention, platform maintenance and improving course content where your interests are not overridden.
• Legal obligation: to retain records or disclose information when required by law or by courts and regulatory authorities.

Cookies and Similar Technologies

golexora uses cookies to facilitate site functionality and to gain insight into user behavior. Cookies help keep you logged in, remember preferences and improve the service experience.

We use session cookies for technical functionality, persistent cookies for remembering settings, and third-party cookies for analytics and advertising where applicable. Sensitive personal data is not stored in cookies.

Categories include strictly necessary cookies for site operation, performance cookies for analytics, functionality cookies to remember preferences, and optional marketing cookies which are enabled only with your consent.

You can manage or disable cookies via your browser settings and through consent controls on golexora.info. Disabling certain cookies may affect access to some features and online course functions.

For more details on cookies and how we use them, visit golexora.info/cookie-policy or contact our support team.

Data Sharing and Disclosure

We share personal data only as required to deliver services, comply with legal obligations and work with trusted service providers. All third-party relationships are governed by contracts that require appropriate protection of personal information.

• Service providers: IT hosts, learning management system vendors and payment processors who support course delivery and administration.
• Professional partners: external trainers, assessors and accreditation bodies that need participant data to validate course completion.
• Legal and regulatory authorities when required by law, court order or to respond to official contribute.
• Corporate sponsors or employers for employer-sponsored enrollments, limited to information necessary for administration and reporting.
• Analytics and marketing platforms where you have opted in to receive communications or where aggregated data is used for performance measurement.
• With your explicit consent, other third parties you designate during registration or program enrollment.

International Transfers

Some of our service providers may operate servers or offices outside Thailand. Where personal data is transferred internationally, we take steps to ensure appropriate safeguards are in place such as standard contractual clauses or provider commitments to equivalent protection.

We rely on contractual safeguards, vetted provider security practices and data processing agreements to protect transferred data, and assess third-party compliance before sharing personal information across borders.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations and to support business needs such as certification records and dispute resolution.

Account and enrollment records are retained for a period aligned with accreditation and tax requirements or for up to seven years where needed for business and legal purposes, unless local law requires a different retention period.

Communications and support correspondence related to your course enrollment are retained for the duration necessary to handle queries, improve service quality and address any disputes.

System logs and security records are kept for operational troubleshooting and fraud detection for a limited period according to our security and compliance policies.

You may request deletion of personal data where no legal retention requirement applies; certain records required for certification, tax or legal compliance may be exempt from deletion requests.

Security of personal data

We implement administrative, technical and physical measures to protect personal data from unauthorized access, loss or misuse. Security controls are reviewed periodically and updated to reflect industry standards appropriate for our scale of operations.

• Access controls and authentication to restrict data access to authorized personnel only.
• Encryption of data in transit and at rest where feasible, and secure data storage with trusted providers.
• Regular security assessments, vulnerability scanning and incident response procedures to address potential threats quickly.

Your rights

You have rights regarding your personal data, such as accessing the data we hold about you, requesting corrections, and controlling direct marketing preferences. We provide mechanisms to exercise these rights in a straightforward way.

• Right to access: request a copy of personal data we hold about you and information about processing activities.
• Right to rectification: request correction of inaccurate or incomplete information.
• Right to erasure: request deletion of personal data where legal grounds permit and retention obligations do not apply.
• Right to restriction: request limitation of processing under certain circumstances such as ongoing disputes about accuracy.
• Right to data portability: where applicable, request a machine-readable copy of personal data you provided to move to another provider.
• Right to object: object to certain types of processing, including direct marketing, without affecting service delivery where processing is necessary for contract performance.
• Right to withdraw consent: withdraw consent for optional processing such as marketing communications at any time.
• Right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

How to Exercise Your Rights

To exercise your data rights or to submit a query about privacy practices, contact our data protection contact at [email protected] or by mail to our registered address. Please include your name, contact details and a clear description of your request.

[email protected]

We aim to acknowledge requests promptly and respond within a reasonable timeframe, typically within 30 calendar days, subject to verification of identity and complexity of the request.

International data considerations

Although GDPR is an EU regulation, we adopt many of its principles when processing data of individuals located in jurisdictions where similar protections apply. We strive for transparency, purpose limitation and data minimization in our processing activities.

• Lawfulness, fairness and transparency: processing based on clear legal bases and communicated openly to data subjects.
• Purpose limitation and data minimization: collecting only the data necessary for the stated purposes.
• Accuracy: maintaining accurate and up-to-date personal data and providing mechanisms for correction.
• Storage limitation: retaining data only for as long as necessary for legitimate purposes.
• Integrity and confidentiality: protecting personal data through appropriate security measures.
• Accountability: maintaining records of processing activities and demonstrating compliance on request.

If you are located in a jurisdiction covered by GDPR and wish to raise a concern about our processing activities, you may contact the relevant supervisory authority. We will cooperate with inquiries and follow applicable data protection law.

Marketing Communications

golexora may send promotional information about upcoming courses, special offers and relevant resources when you have consented to receive such communications. Messages are crafted to help you advance professional skills and make informed training choices.

You can opt out of marketing communications at any time using the unsubscribe link in emails or by contacting [email protected]. Opting out will not affect administrative messages related to your enrolled courses.

Children and Minors

Our courses are primarily intended for adult learners. We do not knowingly collect personal information from children under the age of 13. If a parent or guardian believes we have collected such data, please contact [email protected] to request removal.

Third-Party Links

golexora.info may contain links to external websites operated by partners or vendors. We are not responsible for the privacy practices or content of those sites. Review third-party privacy policies before providing personal data on external sites.