This Privacy Policy explains how catalystforgrowth collects, uses, retains and protects personal data in connection with our IT security and digital literacy training services offered in Thailand and to international participants. We prioritize data minimization and use industry-standard safeguards to protect information. This document addresses what data we collect, legal bases for processing, retention periods and your rights regarding your personal data. For operational questions, contact us at the address below.
28-06-2026
catalystforgrowth (Business ID: 7745098182795), Thanon Thep Prasit, Na Kluea Sub District, Amphoe Bang Lamung District, Chon Buri Province 20150, Thailand
Thanon Thep Prasit, Na Kluea Sub District, Amphoe Bang Lamung District, Chon Buri Province 20150, Thailand
This section explains key terms used throughout the policy to ensure clarity about what we mean by personal data and related concepts.
Personal data means any information that relates to an identified or identifiable individual, such as name, contact details, identification numbers, or other identifiers collected in connection with our training services.
Processing refers to any operation performed on personal data, including collection, recording, organization, structuring, storage, adaptation, retrieval, use, disclosure, restriction, erasure or destruction.
User refers to an individual who registers for, attends or interacts with catalystforgrowth services, including prospective learners, enrolled participants and corporate contacts.
Service refers to the IT security and digital literacy courses, materials, events and related communications and administrative functions delivered by catalystforgrowth via the website catalystforgrowth.pro and associated channels.
Cookies are small text files placed on your device by websites to store site preferences, track usage for analytics and support essential functionality such as login sessions and language settings.
Data We Collect
We collect information necessary to provide training, manage enrolment, operate our website and communicate with participants. We limit collection to data required for these purposes and handle it in accordance with relevant data protection requirements.
Data You Provide
When you interact with catalystforgrowth we may collect the following categories of user-provided data to administer services and communicate effectively:
Identity and contact data: name, email address, postal address, organization and job title.
Registration and course data: selected courses, enrollment records, attendance, certificates and training progress.
Payment and billing information: where applicable, payment card details processed by payment processors, billing addresses and invoicing information.
Communications: messages sent to support, feedback, assessments and survey responses.
Credentials: account usernames and passwords when you create an account on catalystforgrowth.pro (stored securely).
Professional information: employer details and role information for corporate training programs.
Automatically Collected Data
When you use our website and services we automatically collect technical and usage data to maintain and improve the service, detect abuse and support analytics:
Usage data such as pages visited, features used and course engagement metrics.
Device and connection information including device type, browser, IP address and operating system.
Log data and diagnostic information related to service errors and uptime monitoring.
Cookie and tracking data used for site functionality and aggregated analytics.
Location data inferred from IP addresses for regional service optimization.
Performance metrics to measure course delivery quality and platform responsiveness.
Data from Third Parties
We may receive personal data about you from third parties where necessary to provide or improve services:
Payment processors and invoicing services to complete transactions.
Learning management systems and corporate training platforms integrated for course delivery.
Analytics providers to collect aggregated, pseudonymized usage data for service improvement.
Purposes of Processing
We process personal data for the following legitimate and necessary purposes to run our training services and operate the website:
Provide and manage course enrolment, access, attendance records and certification.
Process payments, issue invoices and manage billing where applicable.
Communicate with participants about courses, updates, schedules, support and administrative matters.
Maintain and secure the website and learning platforms, detect and contribute security incidents.
Improve course content, delivery and user experience through aggregated analytics and feedback.
Comply with legal obligations and respond to lawful requests by authorities.
Protect rights, property and safety of catalystforgrowth, participants and third parties.
Conduct research and reporting on training outcomes using anonymized or pseudonymized data when appropriate.
Legal Basis for Processing
We rely on appropriate legal bases for processing personal data, chosen according to the processing purpose and applicable law:
Contractual necessity: processing necessary to perform the training contract or provide requested services.
Consent: where you have provided clear consent for specific processing activities such as marketing communications.
Legal obligation: processing needed to comply with applicable laws and regulatory requirements.
Legitimate interests: processing for operational purposes, platform security, fraud prevention and improvement of services, balanced against individuals' rights.
Cookies and Similar Technologies
We use cookies and similar technologies to enable essential site functions, remember preferences and collect analytics. You can manage cookie preferences through your browser or provided controls on the site.
Cookies used include session cookies for login and navigation, persistent cookies for preferences and analytics cookies for aggregated usage statistics.
Categories: Strictly necessary, Performance/analytics, Functionality. We avoid intrusive third-party tracking unless you opt in explicitly.
To manage cookies, use your browser settings to block or delete cookies, or use the cookie controls presented on catalystforgrowth.pro. Disabling some cookies may affect site functionality.
Full cookie details and controls are available on the cookie settings page.
Data Sharing and Disclosure
We share personal data only with parties necessary to deliver services or where required by law. Shared recipients are bound by confidentiality and data protection obligations.
Service providers and subprocessors such as hosting, payment processors and learning platform vendors.
Analytics and monitoring providers that process aggregated or pseudonymized usage data.
Professional advisors such as legal and accounting service providers when needed for compliance.
Organizational customers for corporate training (participant data shared to the extent agreed with the customer).
Authorities and regulators if required by law or to respond to lawful requests.
Affiliated service partners engaged to support course delivery under binding contractual terms.
International Data Transfers
Participants may access services from locations outside Thailand and personal data may be transferred to service providers in other jurisdictions for hosting, payment processing and analytics. We assess transfer risks and implement appropriate safeguards.
Safeguards include data processing agreements, standard contractual clauses where available, encryption in transit and at rest, and selection of providers with recognized security practices.
Data Retention
We retain personal data only as long as necessary for the purposes described, considering legal, tax and operational requirements.
Account and profile data are retained for the duration of the account activity and for up to five years after account closure to address legal and administrative needs, unless a longer retention period is required by law.
Support and communications are retained for up to three years for operational continuity and dispute resolution, then archived or deleted according to retention rules.
System logs and technical diagnostics are retained for up to two years for security monitoring and incident contribute, then purged or aggregated to remove personal identifiers.
When data is no longer needed, we securely delete or anonymize it, unless retention is required for legal compliance. Requests for deletion are processed in line with applicable law and the procedures described below.
Security Measures
We apply a combination of administrative, technical and physical safeguards to protect personal data. Our security approach includes access controls, encryption, network protections, regular software updates, vulnerability management and staff training. Vendors and subprocessors are selected based on security posture and are contractually required to maintain appropriate protections.
Encryption of data in transit and at rest using industry-standard protocols (TLS, AES).
Role-based access controls, multi-factor authentication for administrative access and regular access reviews.
Periodic security assessments, patch management and incident response procedures to identify and mitigate threats.
Your Rights
Depending on your jurisdiction, you may have certain rights regarding your personal data. We provide mechanisms to exercise these rights and respond within applicable timeframes.
Right of access: request a copy of personal data we hold about you.
Right to rectification: request correction of inaccurate or incomplete data.
Right to erasure: request deletion of personal data where processing is no longer necessary and no overriding legal basis exists.
Right to restrict processing: request limitation of processing in certain circumstances.
Right to data portability: request transfer of personal data in a structured, commonly used format where applicable.
Right to object: object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: withdraw consent to processing where consent was the legal basis, without affecting prior lawful processing.
Right to lodge a complaint with a supervisory authority if you consider our processing violates applicable law.
How to Exercise Your Rights
If you wish to exercise your data rights under applicable law, including access, rectification, restriction, objection or deletion of personal data processed by catalystforgrowth, submit a written request via the contact methods below. We verify identity to protect your data and will process requests in accordance with the legal timeframes applicable in Thailand and other relevant jurisdictions.
We aim to acknowledge receipt of privacy rights requests within 10 business days and to complete routine requests within 30 calendar days. Complex requests that require additional verification or coordination with third parties may take longer; if so, we will inform you of the expected timeline and reasons for the extension.
Applicable Data Protection Frameworks
Although catalystforgrowth is based in Thailand, we recognize international privacy principles. When we process personal data of individuals covered by the European General Data Protection Regulation (GDPR), we act in accordance with applicable provisions to ensure rights of access, correction, portability, restriction and objection are respected.
Right of access — you may request confirmation of whether we process your personal data and obtain a copy of the data we hold about you, subject to legal limitations.
Right to rectification — you may request correction of inaccurate or incomplete personal data we maintain about you.
Right to erasure — where permitted by law, you may request deletion of personal data that is no longer necessary or unlawfully processed, noting legitimate retention requirements may apply.
Right to restriction of processing — you may request limits on processing while certain disputes or verification processes are underway.
Right to data portability — where technically feasible and applicable, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
Right to object — you may object to processing based on legitimate interests or direct marketing; we will review and assess the request in line with applicable law.
If you believe your rights under GDPR have been breached in relation to processing by catalystforgrowth, you may lodge a complaint with the relevant supervisory authority in your country. We will cooperate with regulators and provide required information to support any lawful inquiry.
Marketing and Communications
catalystforgrowth uses contact information you provide to deliver course notifications, curriculum updates, and information about services related to IT security and digital literacy. Marketing communications are based on your expressed preferences, prior interactions, and where permitted, legitimate business interest to offer relevant professional learning opportunities.
You may opt out of marketing messages at any time by using the unsubscribe link in emails, by changing preferences in your account portal, or by contacting us. After an opt-out request we will stop marketing communications promptly, though you may still receive service-related notices that are necessary for course delivery.
Children's Privacy
Our courses are designed for professionals and adult learners. We do not intentionally collect personal data from children under the age of 16. If we become aware that we have collected data from a person under the applicable age threshold without parental consent, we will take reasonable steps to delete that data promptly.
Third-Party Links and Services
Our website and learning platforms may include links to third-party tools, content providers, analytics services and payment processors. catalystforgrowth does not control those third parties; their privacy practices are governed by their own policies. We recommend reviewing their privacy notices before sharing personal data.
Changes to This Policy
We periodically update this privacy content to reflect changes in our practices or applicable law. Material updates will be published on catalystforgrowth.pro with the revision date. For non-material clarifications, we may update the text without prior notice; continued use of our services after changes indicates acceptance of the updated terms.
Contact for Privacy Matters
For privacy inquiries, data rights requests or to exercise any rights related to personal data, contact catalystforgrowth by mail at Thanon Thep Prasit, Na Kluea Sub District, Amphoe Bang Lamung District, Chon Buri Province 20150, Thailand, by phone at +66950241172, or via the contact form available on catalystforgrowth.pro. Business ID: 7745098182795.