Privacy Policy
Last Updated: January 15, 2025
At GrowForwardNxt, we take your privacy seriously. This isn't just another generic policy written by lawyers—though they did review it. We want you to understand exactly what happens with your information when you interact with our English vocabulary learning platform.
This policy applies to all services offered through grow-forwardnxt.com and explains how we collect, use, and protect your data in accordance with Thailand's Personal Data Protection Act (PDPA) B.E. 2562 and international privacy standards.
What Information We Collect
Information You Provide Directly
When you sign up for our programs or contact us, you share certain details with us. We're careful about what we ask for because we know your time is valuable.
- Your name and contact details when you fill out inquiry forms
- Email addresses for program communications and learning updates
- Educational background and English proficiency level to match you with appropriate content
- Payment information processed securely through our payment partners
- Learning preferences and goals you share during enrollment
Technical Data
We collect basic technical information like IP addresses, browser types, and device details. This helps us keep the platform running smoothly and identify potential security issues.
Learning Progress
Your quiz results, vocabulary practice sessions, and course completion rates are tracked. This isn't about surveillance—it helps us improve our teaching methods and your learning experience.
Usage Patterns
We see which lessons you spend time on, what resources you download, and how you navigate our platform. Think of it as understanding how students actually learn, not just how we think they should.
How We Use Your Information
Educational Services
Most of what we collect directly supports your learning journey. We use your data to customize lesson recommendations, track your vocabulary progress, and send you relevant learning materials. When you tell us you're struggling with business English, for example, we'll adjust what we show you.
Your progress data also helps our instructors understand where students commonly get stuck. If fifty people struggle with the same grammar concept, that's a sign we need to improve how we teach it.
Communication and Support
We'll email you about your courses, send program updates, and respond to your questions. Sometimes we share helpful learning tips or new vocabulary resources that match your level. You can opt out of the extra educational content anytime—though many students find it useful.
What We Don't Do
We don't sell your personal information to third parties. We don't share your learning data with employers or educational institutions without your explicit permission. We don't use your information for purposes unrelated to language education.
If that ever changes, we'll tell you clearly and ask for your consent first.
Data Storage and Security in Thailand
Where Your Data Lives
Your information is primarily stored on secure servers within Thailand. We also use international cloud services that meet strict security standards. Our Bangkok office at 64 Vibhavadi Rangsit Rd maintains oversight of all data handling practices.
Encryption Standards
All data transmitted to and from our platform uses industry-standard SSL/TLS encryption. Your stored information is encrypted at rest. Payment details are never stored on our servers—they go directly to our certified payment processors.
Access Controls
Only authorized staff members can access student data, and only when necessary for educational services or support. We maintain detailed access logs and review them regularly. No one can download bulk student information.
Regular Audits
We conduct quarterly security reviews of our systems. Our practices are evaluated against PDPA requirements and international privacy standards. When we find gaps, we fix them.
Sharing Your Information
Service Providers We Work With
Running an online education platform requires partners. We work with email service providers, payment processors, and cloud hosting companies. These partners only receive the minimum information needed to perform their specific services.
| Service Type | What They Access | Purpose |
|---|---|---|
| Email Services | Email address, name | Sending course updates and communications |
| Payment Processing | Payment details, transaction amounts | Processing enrollment fees securely |
| Cloud Hosting | All platform data (encrypted) | Storing and serving educational content |
| Analytics Tools | Anonymized usage patterns | Understanding how students use the platform |
Legal Requirements
We'll disclose your information if required by Thai law or valid legal processes. This might happen if there's a court order or legitimate investigation. We'll notify you when legally permitted to do so.
Your Rights Under Thai Law
What You Can Do With Your Data
Access Your Information
You can request a copy of all personal data we hold about you. We'll provide it in a readable format within 30 days. Sometimes we need to verify your identity first—just to make sure we're not sending your data to someone else.
Correct Inaccuracies
Found a mistake in your profile? Let us know and we'll fix it. You can update most information yourself through your account settings. For things you can't change directly, just email us.
Delete Your Data
You can request deletion of your account and associated data. We'll remove everything except what we're legally required to keep for tax or regulatory purposes. This process typically takes 14 days.
Restrict Processing
You can ask us to limit how we use your data. For example, you might want us to stop sending educational emails while keeping your enrollment active. We'll honor reasonable requests.
Data Portability
Want to take your learning data elsewhere? We can provide your progress records, quiz results, and course history in a machine-readable format. You own your learning journey.
Withdraw Consent
For any data processing based on your consent, you can withdraw that consent anytime. This won't affect the legality of processing that happened before your withdrawal.
Lodge a Complaint
If you believe we've mishandled your data, you can file a complaint with Thailand's Personal Data Protection Committee. We'd prefer you contact us first so we can address your concerns directly.
How Long We Keep Your Data
Retention Periods
We don't keep your information forever. Different types of data have different retention schedules based on legal requirements and educational purposes.
Active Student Data
While you're enrolled in programs, we maintain all your information to support your learning. This includes contact details, progress records, and course materials.
After Completion
We keep basic enrollment records and certificates for 7 years to verify your credentials if needed. Learning progress data is retained for 3 years for research and improvement purposes.
Marketing Communications
If you've signed up for our newsletter but never enrolled, we'll keep your email for up to 2 years. After that, it's automatically removed unless you're still engaging with our content.
Financial Records
Thai tax law requires us to maintain payment and transaction records for 5 years. This is non-negotiable, even if you request data deletion.
Cookies and Tracking
What We Track and Why
Our website uses cookies—small text files stored on your device. Some are essential for the site to function. Others help us understand how people use our platform so we can make it better.
Essential Cookies
These keep you logged in, remember your language preferences, and maintain your session security. Without them, the platform wouldn't work properly. You can't disable these through our settings, but your browser can block them if you want.
Analytics and Performance
We use analytics tools to see which lessons are most helpful, where students get confused, and what features people actually use. This data is anonymized—we're looking at patterns, not tracking individuals.
You can opt out of analytics tracking through your account preferences. The site will work exactly the same way.
International Data Transfers
When Data Crosses Borders
Some of our service providers operate servers outside Thailand. When your data is transferred internationally, we ensure adequate protection through standard contractual clauses approved by Thai regulators.
Cloud hosting services might store redundant copies in multiple countries for reliability. Payment processors handle transactions through international banking networks. Email services route messages through global infrastructure.
All international transfers comply with PDPA requirements and include appropriate safeguards for your data protection.
Children's Privacy
Students Under 20
Under Thai law, individuals under 20 years old are considered minors for privacy purposes. If you're enrolling someone under 20 in our programs, we need parental or guardian consent.
We don't knowingly collect data from children under 10 without verified parental consent. If we discover we've inadvertently collected such information, we'll delete it promptly.
Parents can request access to their child's learning data, correct inaccuracies, or request deletion at any time by contacting us directly.
Changes to This Policy
Staying Current
Privacy practices evolve as technology and regulations change. We review this policy at least annually and update it when necessary. The "Last Updated" date at the top shows when we last made changes.
For minor updates like clarifying existing practices, we'll post the new version on our website. For significant changes that affect how we handle your data, we'll email you directly and may require new consent before implementing the changes.
We maintain an archive of previous policy versions. If you want to see what's changed, just ask.