Legal

Privacy notice

This notice explains how Devtracebase handles personal data when you browse this site, write to us, or enrol. It should be read with our cookies page.

Data controller

Devtracebase is the controller for personal data collected through devtracebase.digital and related enrolment correspondence. Contact: info@devtracebase.digital. Postal correspondence may be sent to the studio address listed on the contact page.

What we collect

If you only browse, we may process technical logs (IP address, user agent, pages requested) for security and to keep the site working. If you accept analytics cookies, we process coarse usage counts. If you submit the contact form, we process your name, email, optional topic, and message. If you enrol, we additionally process billing details needed to invoice, cohort attendance, and the live feature description you choose to share in class.

We do not ask you to upload production user databases. If a student pastes identifiable end-user data into a critique, we will ask for it to be removed; that material is not requested by us.

Purposes and legal bases

We use enquiry data to reply and to administer seats (contract or pre-contract steps). We use security logs to protect the site (legitimate interests). Where Thai PDPA consent is required for optional analytics cookies, we rely on the choice recorded by the banner. We use invoices and attendance records to meet accounting duties.

Retention

Contact form messages are kept for up to 24 months after the last correspondence, unless a longer period is required for a dispute. Enrolment and invoice records are kept for the period required by Thai accounting rules, typically at least five years. Security logs are rotated on a shorter cycle, usually under 90 days, unless an incident investigation is open. Analytics events, if enabled, are stored in aggregate form for up to 14 months.

Your rights

Subject to Thai PDPA and applicable exceptions, you may request access, correction, deletion, restriction, or a copy of personal data we hold, and you may object to certain processing. You may withdraw cookie consent without affecting site functionality. Send requests to info@devtracebase.digital. You may also lodge a complaint with the Thai data protection authority.

International transfers

Our email and hosting providers may process data on servers outside Thailand, including in jurisdictions with different data protection laws. When we use such providers, we take contractual and practical steps appropriate to the transfer, such as standard contractual clauses or equivalent safeguards offered by the vendor, and we limit access to staff who need it for teaching or administration.

Sharing

We share data with hosting, email, and accounting vendors acting on our instructions. Guest critics see only what a student presents in the room. We do not sell personal data.

Last updated 1 August 2026.