General Information

This section defines terms used in the policy to clarify the scope of data processing and the roles of parties involved.

We collect data that is necessary for course administration, communication, and legal compliance. Data may originate from the user directly, be generated automatically during use of our services, or be obtained from third-party providers.

Examples of personal data that users may provide when interacting with onjuristoity are listed below. Providing required fields is necessary for enrolment and administration.

• Contact details: full name, email address, phone number, and postal address used for registration and correspondence.
• Identification and professional information: national ID or passport number where required for verification, professional qualifications, employer name and job title.
• Payment and billing data: invoicing name, billing address and transactional details necessary to process course fees.
• Application materials: curriculum vitae, certificates, supporting documents or statements provided as part of a course application.
• Communications content: messages sent to our support team, feedback forms, and survey responses.
• Account credentials: username and password chosen to access participant portals and course materials.

We also collect certain technical and usage information automatically when users interact with onjuristoity.info to maintain and improve the service.

• Device and browser data: device model, operating system, browser type and settings.
• Usage data: pages visited, time spent on pages, click paths and course module access logs.
• Log data: server logs recording IP addresses, request times and error reports used for diagnostics.
• Cookies and identifiers: session identifiers, persistent identifiers and analytics cookies as described below.
• Location data: coarse geolocation inferred from IP address for general analytics and time zone defaults.
• Performance metrics: anonymized data related to system performance and content delivery.

In some instances we receive data from third parties to verify information or to provide integrated services and analytics.

• Payment processors and banks that provide transaction confirmations and billing status.
• Verification services that confirm identity or professional credentials where required by course rules.
• Analytics and hosting providers that supply aggregated usage statistics and infrastructure logs.

We process personal data for specific, limited purposes necessary to deliver courses and support participants. Those purposes include the following:

• Registering participants, managing enrolment records and administering course schedules and materials.
• Processing payments, issuing invoices and maintaining business records required for accounting.
• Communicating about course content, schedules, updates, and administrative notices by email, phone or postal mail.
• Delivering online course content, assessments and certificates to enrolled participants.
• Ensuring compliance with legal and regulatory obligations applicable to professional training providers in Thailand.
• Improving the service through aggregated analytics and operational monitoring to maintain stability and functionality.
• Responding to user inquiries, support requests and reasonable access or correction requests from participants.
• Preventing and contribute fraud, abuse or other unlawful activity affecting our services and users.

We rely on different legal bases to process personal data depending on the purpose and applicable law. These are outlined below where relevant.

• Performance of a contract: processing necessary to provide course services and fulfill enrollment agreements.
• Legal compliance: processing required to meet statutory, tax or regulatory obligations in Thailand.
• Legitimate interests: processing for fraud prevention, service maintenance, and communications where such interests are not overridden by user rights.
• Consent: where specific optional communications or marketing are based on explicit user consent, users may opt in or withdraw consent at any time.

We limit sharing of personal data and disclose it only to parties that need access to perform services or comply with legal requirements. Third-party recipients are required to handle data in accordance with this policy.

• Service providers engaged to process payments, host data, or deliver communication services on our behalf.
• Regulators, auditors or law enforcement when required by applicable law or in response to lawful requests.
• Professional advisors such as accountants or legal counsel when necessary for compliance or dispute resolution.
• Verification agencies that confirm identity or qualifications to support course eligibility checks.
• Aggregated or anonymized information that does not identify individuals may be shared for reporting or research purposes.
• Third parties providing optional integrations or external learning tools where users have chosen to link accounts or grant access.

onjuristoity implements administrative, technical and physical measures designed to protect personal data against unauthorized access, alteration, disclosure and destruction appropriate to the nature of the data and processing activities.

• Access controls and role-based permissions to limit employee access to personal data required for their duties.
• Encryption of stored personal data and secure transmission using TLS for data in transit.
• Regular security assessments, logging and monitoring to detect and respond to potential incidents promptly.

Depending on applicable law, users may have rights regarding their personal data. Requests are handled in accordance with verification procedures to protect data and privacy.

• Access: request a copy of personal data we hold about you.
• Correction: request correction of inaccurate or incomplete personal data.
• Deletion: request deletion of personal data where permitted by law and subject to retention obligations.
• Restriction: request restriction of certain processing activities in defined circumstances.
• Data portability: request a machine-readable copy of data provided to us where technically feasible.
• Objection: object to processing based on legitimate interests where applicable.
• Withdraw consent: where processing is based on consent, withdraw that consent at any time without affecting prior processing.
• Complaint: lodge a complaint with a supervisory authority if you believe your rights are not being respected.

• We will respond to GDPR data subject requests within the timeframes required by law and apply lawful bases for processing as described above.
• When transferring data outside the EEA we will implement appropriate safeguards such as standard contractual clauses or other mechanisms permitted under GDPR.
• Data protection principles including purpose limitation, data minimization and storage limitation guide our processing activities in applicable cases.
• Users subject to GDPR may contact us to exercise rights or to request additional information about transfers and safeguards.

If you believe onjuristoity has not handled your personal data in accordance with applicable law, you may submit a complaint. For residents of jurisdictions covered by data protection regulations, we will document and review complaints. To file, provide a clear description of the concern, relevant dates, and any supporting documents. We will acknowledge receipt and provide information on our review process. Complaints may also be directed to local supervisory authorities where applicable.

Content and services on onjuristoity are designed for adult learners and professionals. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a minor without appropriate consent, we will take steps to delete that data in accordance with applicable law.

Our site may include links to third-party websites, platforms, or tools used for course delivery, payment processing, or analytics. onjuristoity is not responsible for the privacy practices of third parties. Please review third-party privacy notices before sharing personal information with them.

We review privacy practices regularly and may update this privacy policy to reflect changes in law, service features, or operational needs. Material changes will be posted on the website with an updated effective date. Continued use of our services after changes indicates acceptance of the revised policy where permitted by law.