General Privacy Information

Key Definitions

To keep explanations clear we define terms used in this policy. Definitions focus on how we handle information when delivering courses, analyzing results from case studies, and providing customer support.

Personal data means any information that identifies you directly or indirectly, such as name, email address, phone number, payment details, location data, course progress and any content you submit during exercises or coaching sessions.

Processing means any operation performed on personal data, including collection, storage, use, analysis, sharing, anonymization and deletion, as applied to course administration, progress tracking, and aggregated reporting for improvement.

User refers to an individual who accesses the getmindflexa website or registers for courses, workshops, coaching sessions or related services offered by getmindflexa in Thailand and online.

Service means the online and in-person personal-growth courses, workshops, coaching, materials, assessments and community features provided by getmindflexa at getmindflexa.info and associated platforms.

Cookies are small data files set on your device when you visit getmindflexa.info. They enable core site functions, remember preferences, and support analytics to improve course delivery and user experience.

Purposes of Processing

We process personal data to operate the platform, provide courses and support, analyze outcomes using case studies, and comply with regulatory obligations. The listed items describe specific use cases and practical scenarios.

• To provide and manage your account, enrollments and course access including progress tracking and certification.
• To process payments, invoices and handle refunds or billing inquiries.
• To communicate about courses, schedules, updates and support requests based on your communication preferences.
• To analyze aggregated learning outcomes and scenario effectiveness to improve curriculum and produce anonymized case-study reports.
• To personalize learning paths, suggest modules and match you to relevant practical scenarios based on stated goals.
• To detect, prevent and respond to fraud, abuse, security incidents and to comply with legal obligations.
• To send marketing materials where you have opted in and to measure campaign performance with anonymized reporting.
• To facilitate third-party integrations you authorize, such as calendaring or credential import/export.

Legal Bases for Processing

Where applicable law requires us to state the legal basis for processing personal data, we rely on the following bases depending on the activity and context.

• Contract performance: processing necessary to perform services you requested, such as course delivery and billing.
• Consent: where you have given clear permission for specific uses like marketing or public case-study publication.
• Legitimate interests: improving platform functionality, fraud prevention, and anonymized analytics subject to balancing tests.
• Legal obligation: processing required to comply with laws, tax reporting and law enforcement requests.

Data Subject Rights (GDPR-style Rights)

If applicable under your jurisdiction, you may have rights to access, correct, or delete your personal data, request portability, or object to certain processing. We describe typical rights and how to exercise them below.

• Right of access: request a copy of personal data we hold about you.
• Right to rectification: ask to correct inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data, subject to retention obligations and legitimate interests.
• Right to restrict processing: request limits on certain uses of your data while a dispute is resolved.
• Right to data portability: receive a machine-readable copy of data you provided in structured form.
• Right to object: object to processing based on legitimate interests or for direct marketing purposes.

Cookies and Tracking

We use cookies and similar technologies to make getmindflexa.info work and to analyze how users interact with courses and materials. Cookies support core functionality and informed improvements based on aggregated case outcomes.

Cookie types include session cookies for authentication, persistent cookies for preferences, and third-party cookies used by analytics partners to measure site and course performance.

Categories: essential cookies for site operation, performance/analytics cookies for usage insights, functional cookies for personalization, and targeting cookies for marketing (used only with consent).

You can manage cookie preferences via your browser settings or our cookie consent tool on the site. Disabling certain cookies may affect access to some features or the ability to save progress in courses.

Full Cookie Policy

Data Sharing and Disclosure

We share personal data only as necessary to provide services, with service providers, and where the law requires. Below are common categories of recipients and example scenarios.

• Service providers: payment processors, hosting providers, analytics vendors, and customer support platforms that process data under contract.
• Professional advisors: auditors, legal advisors and tax consultants when needed to comply with legal duties.
• Partners and affiliates: trusted partners that support course delivery when you opt into integrations or joint programs.
• Law enforcement and regulators: where required by law, court order or to respond to legal claims.
• Marketing and research partners: anonymized or pseudonymized datasets used to measure campaign effectiveness where you have consented.
• Business transactions: in connection with a merger, sale, reorganization or asset transfer, subject to confidentiality safeguards and notice where required.

International Transfers

Data may be stored or processed in countries other than where you live, including Thailand and other jurisdictions where our service providers operate. We take steps to ensure appropriate protections for international transfers.

Safeguards include data processing agreements, standard contractual clauses, encryption in transit and at rest, and vendor assessments. We limit transfers to providers that maintain adequate protections.

Data Retention

We retain personal data only as long as needed for the purposes described, accounting requirements, and to resolve disputes or enforce agreements. Retention periods depend on the data type and processing purpose.

Account data: retained while your account is active and for up to three years after account closure for record-keeping and to address potential disputes.

Messages and support tickets: retained for up to two years to ensure continuity of support and to learn from practical case outcomes.

System logs and analytics: retained in aggregated or pseudonymized form for up to 12 months for product improvement and security purposes.

Deletion: when data is deleted it is removed from active systems; backups are retained for limited additional time and securely destroyed according to our routines.

Security Measures

We implement technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration and destruction. Security practices are selected based on the sensitivity of data and evolving threats.

• Encryption of data in transit (TLS) and encryption at rest for critical records.
• Access controls and role-based permissions, multi-factor authentication for administrative access.
• Regular security assessments, vulnerability scanning and staff training on data handling and incident response.

Your Rights

Depending on applicable law, you may have rights with respect to your personal data. We provide practical steps and examples to help you exercise those rights in common scenarios.

• To exercise rights or request information, contact our privacy team at the address or email below. Provide sufficient detail to identify your account and the request.
• We aim to respond to verified requests promptly and will inform you if additional information or legal limits apply. For complex requests we may need to extend response time and will notify you.
• Access: You may request a copy of personal data we hold about you. For example, learners can request records of completed modules, attendance logs, and assessment notes associated with their account.
• Rectification: If your personal information is inaccurate or incomplete, you can request correction. A practical case: updating a legal name after a change so certificates reflect the correct identity.
• Erasure: You may ask us to delete personal data that is no longer necessary for the purposes for which it was collected. We will evaluate requests against retention requirements and lawful processing needs.
• Restriction: You can request temporary restriction of processing while a dispute over accuracy or lawfulness is resolved. Example: freezing profile visibility while we verify a contested enrollment record.
• Portability: Where applicable, you can request a machine-readable copy of personal data you provided to us, such as course progress and certificates, to transfer to another training provider or for personal archiving.
• Objection: You may object to certain processing activities such as profiling for marketing. In such cases we will stop or adapt those activities unless there is a compelling lawful reason to continue.

How to request your privacy rights

To exercise any privacy right, submit a written request including your full name, getmindflexa account email (if applicable), and a clear description of the action you want us to take. Include a copy of an identity document for verification if the request involves sensitive data or account access. Example scenario: a learner asks to correct certificate details; we verify identity, update records, and confirm changes. Send requests to [email protected] or by mail to the address below. Provide Business ID 1376957505168 in your request to help us process it efficiently.

[email protected]

We aim to respond to valid privacy requests within 30 days of receipt. Complex requests or those requiring additional verification may take longer; we will notify you of any extension and the reason. Typical cases, such as correcting a name on a certificate, are often completed within two weeks.