Privacy Policy

Edsy Thailand

GDPR Data Privacy Policy
Effective Date: 26 August 2026
This Data Privacy Policy outlines how Edsy Thailand collects, uses, maintains, and discloses information collected from users (each, a "User") of the Edsy AI Coach in compliance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).

1. Data Controller

Edsy Thailand is the Data Controller responsible for the processing of your personal data.
Data Controller: Edsy Thailand
Contact Information (DPO or Privacy Contact): hello@edsy.co
Address: 23 Floor M Thai Tower, All Seasons Place, 87 Witthayu Road, Lumphini, Pathum Wan, Bangkok 10330

2. Personal Data We Collect and Categories

We collect the following categories of personal data, which are derived from information provided by the School or collected through usage of our platform:

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes and under the stated legal bases:

4. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

Right to Access: The right to request copies of your personal data.
Right to Rectification: The right to request that we correct any information you believe is inaccurate or incomplete.
Right to Erasure (Right to be Forgotten): The right to request that we erase your personal data under certain conditions.
Right to Restrict Processing: The right to request that we restrict the processing of your personal data under certain conditions.
Right to Object to Processing: The right to object to our processing of your personal data, particularly when based on legitimate interest.
Right to Data Portability: The right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the information provided in Section 1.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with third-party service providers (data processors) who perform services on our behalf (e.g., hosting, analytics), provided they are bound by contractual terms to keep the data secure and process it only in accordance with our instructions.

6. Security Measures

We are committed to ensuring that your data is secure. We implement appropriate technical and organizational measures to protect personal data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

7. Changes to this Privacy Policy

We may update this policy periodically. We encourage Users to frequently check this page for any changes to stay informed about how we are protecting the personal information we collect. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.