Scope
This policy applies to the website traderfaculty.com, all subdomains, and any email or support communication you have with us. It does not apply to third-party brokers you connect to via our affiliate links — those relationships are governed by each broker's own privacy policy.
Data controller
TraderFaculty Editorial Co., Ltd. is the data controller. If you are in the EEA or UK, we act as joint controller with our EU editorial office. Our Data Protection Officer can be reached at dpo@traderfaculty.com.
What we collect
| Category | What | Purpose |
|---|---|---|
| Identity data | Email address (newsletter), optional name | Send the newsletter; identify you for corrections. |
| Usage data | Pages viewed, lesson progress, search queries, referrer | Measure which lessons work, fix what doesn't, improve navigation. |
| Device data | IP address (truncated), browser type, OS, viewport | Serve appropriate layouts and detect abuse. |
| Assessment data | Answers you submit to the placement assessment | Recommend the correct starting track. Never sold, never shared. |
We do not collect sensitive personal data (religion, health, political opinions, biometrics). We do not attempt to identify anonymous visitors. We do not buy audience data from data brokers.
Why we collect it
Every data point above maps to a narrow, stated purpose. We do not profile you for advertising. We do not build audience segments for sale. We do not train any AI model on your data.
Legal basis
- Consent — cookies beyond the strictly-necessary set, newsletter subscription.
- Contract — fulfilling the service you request (delivering a newsletter you signed up for).
- Legitimate interest — basic, aggregated analytics to improve the site; preventing abuse.
- Legal obligation — retaining tax records where applicable.
How long we keep it
- Newsletter email: until you unsubscribe, then 30 days in a suppression list.
- Analytics data: 14 months aggregated, no raw logs retained beyond 30 days.
- Assessment answers: 90 days, then permanently deleted.
- Correspondence: 24 months after the last reply.
Your rights
Under the Thailand PDPA, GDPR, and UK DPA, you have the right to:
- Access a copy of your personal data
- Rectify data that is inaccurate or incomplete
- Erase your data (subject to legal retention requirements)
- Restrict or object to processing
- Port your data in a structured, machine-readable format
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
To exercise any of these, email dpo@traderfaculty.com. We respond within 30 days, free of charge for reasonable requests.
Security
All traffic is served over HTTPS. Secrets are stored in Vercel's encrypted environment-variable store. Newsletter data lives with Resend under their ISO 27001 / SOC 2 controls. Editorial workflow credentials use Sanity's token-based auth with role-scoped permissions. We publish security advisories at security@traderfaculty.com.
Changes to this policy
When we materially change this policy, we note it at the top of the page and email newsletter subscribers. Minor edits (typos, formatting) are not announced but are logged in the version history below.
Contact the DPO
Questions, complaints, or subject-access requests: dpo@traderfaculty.com. For the Thai PDPA supervisory authority, see pdpc.or.th.
Effective date: 1 April 2026 · Version 1.0 · See also Methodology and Terms.