Chalat AI School Contact Us

Privacy Policy

Last Updated: 20 June 2026  ·  Effective: 20 June 2026

Chalat ("we", "our", "us") takes the privacy of our learners and website visitors seriously. This policy explains what personal information we collect when you use our website at chalat.world or enrol in one of our programs, how we use it, and the choices you have.

This policy is written to be clear and readable. If you have a question not answered here, please write to [email protected].

1. Who We Are

Chalat is an AI development school based at 142 Phahonyothin Road, Chatuchak, Bangkok 10900, Thailand. We are the data controller for personal information processed under this policy. Our operations are subject to Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

2. What Data We Collect

We collect personal information in the following situations:

  • Contact form submissions: name, email address, and optional phone number and message
  • Program enrolment: name, email, and billing details necessary to process your enrollment
  • Cookies and analytics: technical data about how you use our website, described in our Cookie Policy
  • Correspondence: email messages or other communications you send us

We do not collect special-category data (such as health or financial information beyond what is needed for payment processing).

3. Legal Basis for Processing

  • Consent: for optional cookies and marketing communications
  • Contractual necessity: to deliver programs you have enrolled in
  • Legitimate interests: for general site security and operational purposes
  • Legal obligation: to comply with applicable Thai law

4. How We Use Your Data

  • Respond to enquiries submitted through our contact form
  • Manage your enrolment and deliver program materials
  • Send program-related updates and mentor feedback
  • Process payments securely through our payment provider
  • Improve our website and programs through aggregated analytics
  • Comply with legal requirements

We do not sell your personal information. We do not use your data for automated decision-making that produces legal or similarly significant effects.

5. Data Sharing with Third Parties

We share data only as necessary:

  • Payment processor: billing details are passed to our payment provider for transaction processing
  • Analytics provider: anonymised usage data may be processed by Google Analytics (with IP anonymisation enabled)
  • Email delivery service: used to send transactional and program emails
  • Legal authorities: if required by Thai law or a valid legal process

All third-party processors are required to handle your data securely and only for the purposes we specify.

6. Data Retention

  • Contact enquiries: retained for 12 months from the date of receipt, then deleted unless you enrol
  • Learner records: retained for the duration of your enrolment and for 3 years afterward for administrative purposes
  • Financial records: retained for 7 years as required by Thai accounting law
  • Analytics data: aggregated and anonymised; individual session data retained for 14 months by our analytics provider

7. Cookies

We use cookies to keep the site functioning and to understand usage patterns. You can control which optional cookies are set. See our Cookie Policy for full details and controls.

8. Data Protection Measures

  • Website served over HTTPS (TLS encryption)
  • Access to personal data restricted to authorised staff only
  • Payment data handled by a PCI-DSS compliant payment provider — we do not store card details
  • Regular review of data handling processes
  • In the event of a data breach affecting your rights, we will notify you and the relevant authority within the timeframes required by law

9. Your Rights Under PDPA

Under Thailand's Personal Data Protection Act, you have the right to:

  • Request access to your personal data
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal retention requirements)
  • Request restriction of processing in certain circumstances
  • Object to processing based on legitimate interests
  • Withdraw consent at any time (where processing is based on consent)
  • Data portability for data you provided to us
  • Lodge a complaint with Thailand's Personal Data Protection Committee

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may include links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before sharing any personal information.

11. Children

Our programs and website are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of the page. Continued use of our website or programs after a change constitutes acceptance of the updated policy.

13. Contact

For any privacy-related questions or to exercise your rights: