Privacy Policy

Tensora ("we", "us", "our") is committed to handling your personal data responsibly and transparently. This Privacy Policy explains what information we collect when you use our website and services, how we use it, and what rights you have over it.

This policy applies to all personal data collected through our website at tensorayd.sbs, our online learning platform, and any communications you have with us. It is written in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

If you have questions about this policy or how we handle your data, contact us at [email protected].

We collect the following categories of personal data:

• Contact Information: Name, email address, and phone number provided when you submit our contact form or enrol in a program.
• Usage Data: Information about how you use our website, including pages visited, time spent, and referring pages, collected through cookies and analytics tools.
• Course Activity: Progress data, submitted project files, and interactions within our learning platform for enrolled students.
• Communication Records: Email exchanges and support conversations when you contact us.

We do not collect payment card details directly. Payment processing is handled by third-party payment providers who maintain their own data protection standards.

Legal basis: We process your data on the basis of your consent (for marketing communications and non-essential cookies), contract performance (for enrolled learners), and legitimate interests (for website analytics and security).

Retention: Contact enquiry data is held for 24 months. Enrolled learner data is retained for 36 months from the end of the relevant program. You may request earlier deletion (see Section 7).

We use the data we collect for the following purposes:

• Responding to enquiries and processing course enrolments
• Delivering course content and tracking learning progress
• Sending program-related communications (schedules, updates, feedback requests)
• Improving our website and course materials through aggregated analytics
• Sending marketing communications about new programs (only where you have opted in)
• Meeting legal obligations under Thai law

We do not sell your personal data to third parties. We do not use it for advertising profiling. We do not share it with third parties for their own marketing purposes.

We may share data with service providers who assist us in operating our platform (such as hosting providers and analytics services). These providers are contractually required to handle data only as we direct and in accordance with applicable law.

We take reasonable technical and organisational steps to protect your personal data against unauthorised access, loss, or disclosure. These measures include:

• Encrypted data transmission using TLS/HTTPS across our website and platform
• Access controls limiting data access to staff who need it for their work
• Regular review of our data handling processes and third-party providers
• Breach notification procedures in line with PDPA requirements

No system is completely without risk. In the event of a data breach that may affect your rights, we will notify you and the relevant authority within the timeframes required by Thai law.

Our website uses cookies to function and to help us understand how it is used. Essential cookies are required for the site to work and are always active. Analytics and preference cookies are only set with your consent, which you can manage via our cookie banner.

For full details of the cookies we use and how to manage your preferences, see our Cookie Policy.

Under Thailand's PDPA, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your data, subject to any legal obligations we have to retain it.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.