Privacy Policy
Last Updated: March 15, 2025
At BrightCereb, we respect your privacy and understand that protecting your personal information matters. This policy explains how we collect, use, and safeguard your data when you interact with our trading education platform.
We operate in compliance with Thailand's Personal Data Protection Act B.E. 2562 (2019), along with international data protection standards. If something here doesn't make sense or you have questions, reach out—we're here to help.
What Information We Collect
We gather different types of information depending on how you use our services. Here's what we typically collect:
Personal Information You Provide
- Contact details like your name, email address, and phone number when you sign up or reach out to us
- Account credentials and profile information you create during registration
- Payment information when you enroll in our courses (processed through secure third-party payment gateways)
- Educational background and experience level to help us tailor content appropriately
- Communication records when you contact our support team or instructors
Information We Collect Automatically
- Technical data including IP address, browser type, device information, and operating system
- Usage patterns such as pages visited, time spent on different sections, and course progress
- Learning analytics that help us understand which materials work best for students
- Cookie data that enables functionality and remembers your preferences
How We Use Your Information
Your data serves specific purposes that directly benefit your learning experience. We don't collect information just for the sake of it.
Primary Uses:
We process your personal information to deliver educational services, manage your account, communicate course updates, and continuously improve our teaching methods. Everything we do with your data connects back to providing better trading education.
- Providing access to course materials, video content, and learning resources you've enrolled in
- Processing payments and maintaining transaction records for your purchases
- Sending important updates about courses, schedule changes, and new learning opportunities
- Responding to your questions, technical issues, or support requests
- Analyzing learning patterns to improve course structure and teaching effectiveness
- Preventing fraud, ensuring platform security, and protecting student accounts
- Complying with legal obligations under Thai law and financial education regulations
We never sell your personal information to third parties. That's not our business model, and it never will be.
Legal Basis for Processing (Thailand PDPA)
Under Thailand's Personal Data Protection Act, we need a lawful reason to process your data. Here's our legal basis:
| Processing Activity | Legal Basis |
|---|---|
| Course enrollment and delivery | Contract performance - we need this information to provide the education service you signed up for |
| Payment processing | Contract performance and legal obligation for financial record-keeping |
| Marketing communications | Your explicit consent, which you can withdraw anytime |
| Platform improvement and analytics | Legitimate interest in providing better educational services |
| Security and fraud prevention | Legitimate interest in protecting our students and platform |
How We Share Your Information
We work with select partners to deliver our services effectively. Here's who might see your information and why:
Service Providers
- Payment processors handling transactions securely (they follow strict financial data standards)
- Cloud hosting providers storing course materials and user data with encryption
- Email service providers sending course updates and educational content
- Analytics tools helping us understand how students learn best
Legal Requirements
We may disclose information when required by Thai law, court orders, or government regulations. This includes compliance with financial education oversight and tax authorities.
Important Note: All third-party service providers sign data protection agreements and are contractually required to keep your information secure and use it only for specified purposes.
Your Rights Under Thai Law
Thailand's PDPA gives you several rights regarding your personal information. You can exercise these rights by contacting us directly:
- Right to Access: Request a copy of personal data we hold about you
- Right to Rectification: Ask us to correct inaccurate or incomplete information
- Right to Erasure: Request deletion of your data when it's no longer needed (with some legal exceptions)
- Right to Restriction: Limit how we process your information in certain circumstances
- Right to Data Portability: Receive your data in a structured, commonly used format
- Right to Object: Oppose processing based on legitimate interests or for marketing purposes
- Right to Withdraw Consent: Revoke consent for processing that relies on your agreement
To exercise any of these rights, email us at contact@brightcereb.com with your request. We'll respond within 30 days as required by Thai law.
Data Security Measures
Protecting your information isn't just a legal requirement—it's fundamental to maintaining trust. Here's how we secure your data:
- Industry-standard encryption for data transmission (TLS/SSL protocols)
- Secure servers located in facilities with physical security controls
- Regular security audits and vulnerability assessments
- Access controls limiting who can view personal information internally
- Password protection requirements for all user accounts
- Automated backup systems to prevent data loss
- Incident response procedures if a security breach occurs
While we implement strong security measures, no online system is completely invulnerable. We continuously monitor and update our security practices to address emerging threats.
Data Retention Periods
We don't keep your information longer than necessary. Here's our retention approach:
| Data Type | Retention Period |
|---|---|
| Account information | Duration of active account plus 2 years after closure |
| Course progress and learning records | 5 years from course completion for certificate verification |
| Payment and transaction records | 7 years as required by Thai tax and accounting laws |
| Marketing consent records | Until consent is withdrawn, then deleted within 30 days |
| Support communications | 3 years from last interaction |
After retention periods expire, we securely delete or anonymize your information so it can't be traced back to you.
Cookies and Tracking Technologies
Our website uses cookies—small text files that help the site function properly and remember your preferences. Most are essential, while others improve your experience.
Types of Cookies We Use
- Essential Cookies: Required for basic site functionality like login sessions and security features
- Functional Cookies: Remember your preferences and choices to personalize your experience
- Analytics Cookies: Help us understand how students use the platform to improve it
- Performance Cookies: Monitor site speed and technical performance
You can control cookie settings through your browser, though disabling certain cookies might limit site functionality. Most browsers accept cookies by default, but you can modify these settings anytime.
International Data Transfers
Some of our service providers operate servers outside Thailand. When we transfer data internationally, we ensure appropriate safeguards are in place:
- Standard contractual clauses approved by data protection authorities
- Service providers located in countries with adequate data protection laws
- Additional security measures for sensitive information crossing borders
- Regular compliance reviews of international service providers
We remain responsible for your data even when processed by overseas partners, and all transfers comply with Thai PDPA requirements.
Children's Privacy
Our trading education services target adults aged 18 and older. We don't knowingly collect information from anyone under 18. If you're a parent who believes your child provided us with personal information, contact us immediately so we can delete it.
Financial education for minors requires parental consent under Thai law. We verify age during registration to ensure compliance.
Changes to This Policy
Privacy practices evolve as technology and regulations change. We review and update this policy periodically to reflect new practices or legal requirements.
When we make significant changes, we'll notify active users by email and update the "Last Updated" date at the top of this page. Continued use of our services after changes indicates acceptance of the updated policy.
For minor updates or clarifications that don't affect how we handle your data, we might not send individual notifications but will still update the policy text.
Third-Party Links
Our platform occasionally links to external resources, trading tools, or educational materials. We're not responsible for privacy practices on those sites.
Before providing personal information to third-party websites, review their privacy policies. We carefully select partners but can't control their data practices once you leave our platform.
Privacy Questions or Concerns?
If you have questions about this privacy policy, want to exercise your data rights, or need to report a privacy concern, we're here to help.