What Information We Collect

Running an education platform means we need certain information to function properly. Here's what we gather and why it matters:

Account Information

When you create an account, we collect basics like your name, email address, and phone number. If you're enrolling in paid courses, we'll need billing details too. This stuff is pretty standard, but it's also essential for keeping your account secure and getting you the materials you've signed up for.

Learning Activity Data

We track how you interact with our courses because it helps us understand what's working and what isn't. This includes which lessons you've completed, how long you spend on different topics, quiz results, and any questions you ask through our platform. Think of it as feedback that helps us improve the content.

Technical Information

Like most websites, we collect technical data through your browser. IP addresses, device types, operating systems, and browser information help us keep the platform running smoothly and spot any security issues before they become problems.

How We Use Your Information

Data collection isn't just bureaucracy. Every piece of information serves a purpose in making your experience better:

• Course Delivery: We need your email to send you course materials, updates about new content, and important notifications about your enrollment status.
• Platform Improvement: Analyzing how students move through our courses helps us identify confusing sections or topics that need more depth.
• Technical Support: When something goes wrong, having access to your activity logs helps our team diagnose issues faster.
• Communication: We'll occasionally send updates about new courses or significant platform changes. You can opt out of marketing emails anytime, though we'll still need to send essential service notifications.
• Security: Monitoring login patterns and access attempts helps us protect your account from unauthorized access.

We won't use your data for purposes beyond what's described here without asking for your explicit consent first.

Data Sharing and Third Parties

We don't sell your personal information. Period. But running an online platform does require working with certain service providers:

Essential Service Providers

Our payment processor handles billing information securely. Cloud hosting providers store course content and user data. Email service providers help us send course materials and notifications. These companies only access data necessary for their specific function, and they're contractually obligated to protect it.

Analytics Tools

We use analytics services to understand how people use our platform. This data is anonymized whenever possible and helps us make informed decisions about course development and platform improvements.

Legal Requirements

Sometimes we're legally required to share information with Thai authorities or in response to valid legal processes. We'll notify you if this happens unless prohibited by law.

Your Rights Under Thai Law

Thailand's Personal Data Protection Act gives you substantial control over your information. Here's what you can do:

To exercise any of these rights, email us at support@rippletechflow.com with your request. We'll respond within 30 days and verify your identity before making any changes.

Data Security Measures

Protecting your information isn't just good practice, it's our responsibility. Here's how we do it:

Technical Safeguards

All data transmitted to and from our platform is encrypted using industry-standard TLS protocols. Stored data is encrypted at rest. We use secure servers located in facilities with physical security measures. Access to databases is restricted and monitored.

Organizational Measures

Only team members who need access to perform their jobs can view personal data. Everyone on our team signs confidentiality agreements and receives regular training on data protection. We conduct periodic security audits and update our practices as new threats emerge.

Incident Response

Despite our best efforts, no system is completely secure. If a data breach occurs, we'll notify affected users within 72 hours as required by Thai law. We'll also report the incident to relevant authorities and take immediate steps to prevent further unauthorized access.

Data Retention

We don't keep your information longer than necessary. Here's our approach:

• Active Accounts: While your account is active, we retain all associated data to provide continuous service.
• Closed Accounts: After you close your account, most personal data is deleted within 90 days. Some information may be retained for up to seven years to comply with Thai accounting and tax regulations.
• Learning Records: Course completion data and certificates may be retained longer for verification purposes, but these are stored separately from personally identifiable information where possible.
• Legal Holds: If your data is subject to legal proceedings or regulatory investigation, we'll retain it until those matters conclude.

Cookies and Tracking

Our platform uses cookies to function properly. Some are essential, others help us improve your experience:

Essential Cookies

These keep you logged in and remember your preferences. Without them, the platform wouldn't work properly. You can't opt out of these, but they don't track you across other websites.

Analytics Cookies

These help us understand which features are popular and where students struggle. The data is aggregated and anonymized. You can disable these through your browser settings without affecting platform functionality.

Your Browser Controls

Most browsers let you refuse cookies or alert you when they're being sent. Just be aware that disabling certain cookies may limit platform functionality.

International Data Transfers

Our servers are primarily located in Thailand, but some service providers operate internationally. When data leaves Thailand, we ensure adequate protection through:

• Standard contractual clauses approved by Thai authorities
• Verification that recipient countries have adequate data protection laws
• Additional technical safeguards like encryption during transfer

You have the right to obtain information about these safeguards by contacting us.

Children's Privacy

Our platform is designed for adults interested in algorithmic trading education. We don't knowingly collect information from anyone under 18. If you're a parent and believe your child has provided us with personal data, contact us immediately and we'll delete it.

Changes to This Policy

We review and update this policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email and display a prominent notice on the platform. The "Last Updated" date at the top tells you when the most recent changes were made.

Continuing to use the platform after changes take effect means you accept the updated policy. If you disagree with changes, you can close your account before they take effect.

Complaints and Regulatory Contact

If you're unhappy with how we've handled your data, please contact us first so we can try to resolve the issue. If you're not satisfied with our response, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee.

You can reach the committee through the Office of the Personal Data Protection Committee, Ministry of Digital Economy and Society.