Policies
Privacy Policy
Effective 20 October 2026
This policy explains what personal data THAIPANYA collects, how we use it, and your rights under Thailand’s Personal Data Protection Act B.E. 2562 (2019).
1. Data controller
THAIPANYA is the controller of personal data collected through the THAIPANYA website and system. Contact us about personal data at support@thaipanya.com.
2. Data we collect
- Account data: the test taker’s first name, last name, nickname and grade; the parent’s first and last name (when a parent buys); username; email and phone (if given); and the password, stored in a one-way encrypted form.
- Order data: items bought, amount, payment method and payment status. Card numbers stay with the payment provider.
- Exam data: answers, time spent on each question, flags and answer changes, and the reports built from them.
- Real exam outcomes (only if you choose to record them): whether the test taker sat the exam, the result and the score range.
- Website usage statistics: pages opened, how far the order steps went, exams and packs viewed, device type, and source (such as the ad link clicked), tied only to a random per-visit ID, never to a name or account.
- Technical data: IP address, browser details and website error reports (excluding what you type) needed for security, abuse prevention and fixing the system.
3. How we use data
- To create and maintain accounts, let test takers sit papers and issue readiness reports, which is necessary to provide what you bought.
- To take payments, issue receipts and keep accounting records required by law.
- To contact you about orders and use of the service.
- To keep the system secure, prevent fraud or abuse, and fix errors.
- To measure how well the website helps people decide, so we can improve it and the order steps.
- To improve paper quality and report accuracy from aggregate statistics, such as each question’s real difficulty, without identifying or ranking test takers.
- To check report accuracy against real exam outcomes, only with consent.
4. Use of AI
Reports are calculated with THAIPANYA’s own rules and statistics. We do not send test takers’ answers or personal data to external AI services.
5. Data of minors
- Most test takers are minors, so purchases are made by a parent, or by a test taker whose parent has acknowledged the purchase.
- A parent linked to a test taker can see the test taker’s reports and results and can exercise the rights in this policy on the test taker’s behalf.
8. Retention
- Account and exam data are kept while the account is active, so reports remain available during the access period.
- When you ask us to delete your account, we delete or anonymise the data, except records the law requires us to keep, such as proof of payment.
- Real exam outcomes are kept until you withdraw consent, and are deleted immediately when you do.
9. Your rights
- Access your data and get a copy.
- Have inaccurate data corrected.
- Have data deleted or its use restricted.
- Object to the use of your data.
- Receive your data in a machine-readable format.
- Withdraw consent at any time, without affecting use before withdrawal.
- Complain to the Office of the Personal Data Protection Committee.
- To exercise these rights, email support@thaipanya.com. We reply within 30 days and may ask you to verify your identity first.
10. Security
We encrypt data in transit, limit access to people who need it, and never store payment card numbers ourselves.
11. Changes to this policy
We will publish any new version on this page with its effective date, and notify you through the system or by email of material changes.
This English version is provided for convenience. If it differs from the Thai version, the Thai version prevails.
See also: Terms of Service and Purchase Conditions