Privacy Policy

Last Updated: January 15, 2025

At Origin Think, we're serious about protecting your information. This policy explains how we handle data when you use our business analysis services and educational resources. We've written this in plain English because legal jargon helps nobody.

Who We Are and What This Covers

Origin Think operates from Thailand and provides financial education and business activity analysis services. This policy applies to all interactions with our website, learning programs, and any services we offer. When we say "we" or "us," we mean Origin Think. "You" means you, the person reading this and using our services.

We comply with Thailand's Personal Data Protection Act (PDPA) of 2019, which came into full effect in 2022. This law gives you specific rights over your personal information, and we take those rights seriously.

Information We Collect

We collect different types of information depending on how you interact with us. Here's what we gather and why:

Information You Give Us Directly

When you sign up for our programs or contact us, you share information with us voluntarily. This includes:

  • Your name, email address, and phone number when you register for learning programs
  • Business information if you're seeking consulting services
  • Payment details when you purchase courses or services
  • Messages you send through our contact forms or email
  • Feedback and survey responses about our programs

Information We Collect Automatically

Like most websites, we collect some technical information automatically. This helps us improve the site and understand how people use our services:

  • Your IP address and general location (country and city level)
  • Browser type and operating system
  • Pages you visit on our site and how long you spend there
  • Links you click and actions you take
  • Time and date of your visits

Information from Third Parties

Sometimes we receive information about you from other sources, but only when necessary and with proper consent. This might include verification data from payment processors or professional references if you're applying for advanced programs.

How We Use Your Information

We don't collect data just for the sake of it. Everything we gather serves a specific purpose. Here's what we do with your information:

Purpose Legal Basis
Delivering educational programs and services you've signed up for Contract performance
Processing payments and maintaining financial records Contract performance and legal obligation
Sending course updates and important service announcements Contract performance
Improving our website and understanding user behavior Legitimate interest
Responding to your questions and support requests Contract performance
Sending marketing communications about new programs Your consent (you can opt out anytime)
Complying with Thai tax and business regulations Legal obligation

We will never sell your personal information to third parties. Period. That's not our business model and never will be.

Who We Share Information With

We keep your data as private as possible, but running our business requires working with some trusted partners. Here's who might see your information:

Service Providers

We work with companies that help us run our platform and deliver our services. These include:

  • Payment processors that handle transactions securely
  • Email service providers that help us communicate with students
  • Cloud hosting services where our platform operates
  • Customer support tools that help us respond to your questions

All these partners are required to protect your data and can only use it for the specific purposes we've authorized.

Legal Requirements

Sometimes we're legally required to share information with Thai government authorities, particularly for tax purposes or if required by court order. We only share what's necessary and will notify you when legally permitted.

Business Transfers

If Origin Think is acquired or merged with another company, your information would be transferred to the new owners. We would notify you before this happens and explain any changes to how your data is handled.

Your Rights Under Thai Law

Thailand's PDPA gives you significant control over your personal data. Here's what you can do:

Access Your Data

You can request a copy of all personal information we hold about you. We'll provide this within 30 days in a readable format.

Correct Inaccuracies

If any information we have about you is wrong or outdated, you can ask us to correct it immediately.

Delete Your Data

You can request deletion of your personal information, though we may need to keep some records for legal or accounting purposes.

Restrict Processing

You can ask us to limit how we use your data while we resolve any disputes or verify information accuracy.

Data Portability

You can request your data in a machine-readable format to transfer to another service provider.

Withdraw Consent

For activities based on consent (like marketing emails), you can withdraw permission at any time.

To exercise any of these rights, contact us at help@origin-think.com. We'll respond within 30 days as required by law. There's no fee unless your request is clearly unfounded or excessive.

How We Protect Your Information

Security isn't just a checkbox for us. We implement multiple layers of protection:

  • All data transmitted to and from our website is encrypted using industry-standard SSL/TLS protocols
  • Payment information is processed through PCI-DSS compliant providers and never stored on our servers
  • Our databases are protected with encryption both in transit and at rest
  • Access to personal data is restricted to employees who need it to perform their jobs
  • We conduct regular security audits and updates to protect against new threats
  • All staff members sign confidentiality agreements and receive data protection training

That said, no system is completely secure. While we do everything reasonable to protect your data, we can't guarantee absolute security. If we detect a data breach that affects you, we'll notify you within 72 hours as required by Thai law.

How Long We Keep Your Data

We don't keep information longer than necessary. Here's our general approach:

Active Student Data

While you're enrolled in our programs, we keep all necessary information to deliver the service. This includes your account details, course progress, and communication history.

Former Student Records

After you complete a program, we retain basic records for seven years to comply with Thai accounting and tax requirements. This includes enrollment records, certificates issued, and payment history.

Marketing Communications

If you've opted into marketing emails, we keep your contact information until you unsubscribe. After that, we delete it within 30 days except for a suppression list to make sure we don't accidentally contact you again.

Website Analytics

Technical information about website visits is typically kept for 26 months, then automatically deleted.

You can request early deletion of your data at any time, subject to our legal obligations to maintain certain records.

International Data Transfers

Our primary operations are in Thailand, but some of our service providers operate servers in other countries. When your data is transferred outside Thailand, we ensure it receives equivalent protection through:

  1. Using service providers that comply with international data protection standards
  2. Implementing contractual safeguards that require equivalent protection
  3. Choosing providers certified under recognized privacy frameworks

Most of our infrastructure partners operate in Singapore and the European Union, both of which have strong data protection laws comparable to Thailand's PDPA.

Cookies and Tracking

We use cookies and similar technologies to make our website work properly and understand how people use it. Here's what we deploy:

Essential Cookies

These are necessary for the website to function. They handle things like keeping you logged in and remembering your preferences. You can't opt out of these while using our services.

Analytics Cookies

We use these to understand which pages are popular, where people get stuck, and how we can improve the user experience. This data is aggregated and doesn't identify you personally.

Marketing Cookies

These help us show you relevant information about our programs and prevent you from seeing the same message repeatedly. You can opt out of these through your browser settings.

Most browsers let you control cookies through their settings. But disabling all cookies might affect how well our website works for you.

Children's Privacy

Our services are designed for adults and business professionals. We don't knowingly collect information from anyone under 18 years old without parental consent. If you're under 18 and interested in our programs, please have a parent or guardian contact us.

If we discover we've accidentally collected data from someone under 18 without proper consent, we'll delete it immediately.

Changes to This Policy

We update this policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email or through a prominent notice on our website at least 30 days before the changes take effect.

Minor updates (like fixing typos or clarifying existing practices) won't trigger notifications, but we'll always update the "Last Updated" date at the top of this page.

Continuing to use our services after changes take effect means you accept the updated policy. If you don't agree with the changes, you can close your account and request deletion of your data.

Filing Complaints

We hope to resolve any concerns you have about privacy directly. But you have the right to file a complaint with Thailand's Personal Data Protection Committee if you believe we've mishandled your information.

You can reach the committee through the Office of the Personal Data Protection Committee, Ministry of Digital Economy and Society, Thailand. Contact us first though – most issues can be resolved quickly through direct conversation.

Questions or Concerns?

If anything in this policy is unclear or you have questions about how we handle your data, we're here to help.

Address: 57, 65 Pra Ong Dam Rd, Nai Mueang, Phitsanulok 65000, Thailand

We respond to all privacy inquiries within 5 business days and aim to fully resolve issues within 30 days as required by law.