Privacy Policy

Last Updated: March 15, 2025

At glowlyblaze, we take your privacy seriously. This policy explains how we collect, use, store, and protect your personal information when you interact with our financial modeling education platform. We're committed to transparency and compliance with Thailand's Personal Data Protection Act (PDPA) and international privacy standards.

Information We Collect

We collect different types of information depending on how you interact with our platform. Some data you provide directly, while other information is gathered automatically as you use our services.

Information You Provide Directly

  • Account registration details including your name, email address, and phone number
  • Payment information processed through secure third-party payment gateways
  • Communication preferences and newsletter subscriptions
  • Course progress data and assignment submissions
  • Messages sent through our contact forms or support channels
  • Professional background information you choose to share in your profile

Information Collected Automatically

  • Device information including IP address, browser type, and operating system
  • Usage patterns such as pages visited, time spent on platform, and feature interactions
  • Learning analytics including course completion rates and assessment scores
  • Technical data like cookies, session identifiers, and error logs

How We Use Your Information

Your data helps us deliver better educational experiences and improve our platform continuously. We don't sell your personal information to third parties.

Purpose Data Used Legal Basis
Course delivery and account management Registration details, login credentials Contract performance
Payment processing Billing information, transaction records Contract performance
Platform improvement Usage analytics, feedback data Legitimate interest
Communication and support Email, phone number, message history Contract performance & consent
Marketing communications Email, communication preferences Consent
Security and fraud prevention IP address, device data, login patterns Legitimate interest & legal obligation

Data Sharing and Third Parties

We work with selected service providers who help us operate our platform. These partners are contractually bound to protect your data and can only use it for specified purposes.

Service Providers We Work With

  • Payment processors for secure transaction handling (we never store full credit card details)
  • Cloud hosting providers for data storage and platform infrastructure
  • Email service providers for course communications and newsletters
  • Analytics tools to understand platform usage and improve user experience
  • Customer support platforms to respond to your inquiries efficiently

Important: We never sell, rent, or trade your personal information with third parties for their marketing purposes. Any data sharing occurs solely to provide you with our educational services or as required by law.

Your Rights Under Thailand PDPA

As a data subject under Thai law, you have specific rights regarding your personal information. We're committed to honoring these rights promptly.

  1. Right to Access: Request copies of your personal data we hold and understand how we process it
  2. Right to Rectification: Correct any inaccurate or incomplete personal information in your account
  3. Right to Erasure: Request deletion of your personal data when it's no longer necessary for the purposes collected
  4. Right to Restriction: Limit how we process your data in certain circumstances
  5. Right to Data Portability: Receive your data in a structured, commonly used format for transfer to another service
  6. Right to Object: Oppose processing based on legitimate interests or for direct marketing purposes
  7. Right to Withdraw Consent: Revoke consent for data processing activities that require it

To exercise any of these rights, contact our Data Protection Officer at help@glowlyblaze.com. We'll respond within 30 days and may need to verify your identity before processing certain requests.

Data Security Measures

Protecting your information is a top priority. We use industry-standard security practices to safeguard data against unauthorized access, alteration, or disclosure.

Technical Safeguards

  • SSL/TLS encryption for all data transmitted between your device and our servers
  • Encrypted storage for sensitive personal information in our databases
  • Regular security audits and vulnerability assessments
  • Multi-factor authentication options for account access
  • Automated backup systems with secure off-site storage
  • Access controls limiting employee data access to job-necessary information only

Organizational Measures

  • Staff training on data protection and privacy best practices
  • Strict confidentiality agreements for all team members and contractors
  • Incident response procedures for potential data breaches
  • Regular review and updates to our security policies

While we take reasonable steps to protect your data, no internet transmission is completely secure. We encourage you to use strong passwords and keep your login credentials confidential.

Data Retention and Deletion

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by law.

Data Type Retention Period Reason
Account information Duration of active account plus 3 years Service provision and legal compliance
Course progress and certifications Permanent (unless deletion requested) Educational records and credential verification
Payment records 7 years after transaction Tax and accounting requirements
Marketing communications data Until consent withdrawn Ongoing communication consent
Support inquiries 3 years after resolution Quality assurance and dispute resolution
Usage analytics 2 years Platform improvement insights

When you request account deletion, we'll remove your personal data within 30 days, except where retention is required by Thai law or for legitimate business purposes such as financial record-keeping.

International Data Transfers

Our primary servers are located in Thailand. However, some of our service providers operate in other countries, which may involve transferring your data outside Thailand.

When we transfer data internationally, we ensure appropriate safeguards are in place:

  • We only work with providers in countries with adequate data protection standards
  • Standard contractual clauses approved by relevant data protection authorities
  • Verification that partners comply with internationally recognized privacy frameworks
  • Regular assessments of data protection measures in place

You can contact us for more specific information about data transfer safeguards relevant to your situation.

Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on our platform. These small files help us remember your preferences and understand how you use our services.

Types of Cookies We Use

  • Essential cookies: Required for basic platform functionality like login and course access
  • Performance cookies: Help us understand how visitors interact with our platform
  • Functionality cookies: Remember your preferences and personalize your experience
  • Analytics cookies: Provide insights into user behavior to help us improve our services

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect platform functionality and your user experience.

Children's Privacy

Our platform is designed for professional analysts and business users. We don't knowingly collect personal information from individuals under 18 years of age without parental consent.

If you're under 18 and interested in our courses, please have a parent or guardian create an account and oversee your learning activities. If we discover we've inadvertently collected data from someone under 18 without proper consent, we'll delete that information promptly.

Changes to This Policy

We review and update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you through:

  • Email notification to your registered address
  • Prominent notice on our platform homepage
  • Updated "Last Updated" date at the top of this policy

We encourage you to review this policy occasionally to stay informed about how we protect your information. Continued use of our platform after changes indicates acceptance of the updated policy.

Questions About Your Privacy?

If you have concerns about how we handle your data or want to exercise your privacy rights, we're here to help.

Email: help@glowlyblaze.com

Phone: +66 2 962 1550

Mail: 46 หมู่ 19 ต.รอบเวียง อำเภอ เมืองเชียงราย Chiang Rai 57000, Thailand

Our Data Protection Officer typically responds within 3 business days.