Privacy Policy

Who we are

Poseidon Training Co., Ltd. ("Poseidon Training", "we", "us") runs this website and is responsible for the personal data collected through it. We are a company registered in Thailand. Our address is Ocean Marina, 167/5 Moo 4 Sukhumvit Road, Na Jomtien, Sattahip, Chonburi 20250, Thailand.

This policy explains what personal data we collect through this website, why we collect it and what we do with it. It also covers the data we use to arrange and deliver the training or assessment you ask about.

What we collect

We collect what you enter in our forms, and a small amount of technical information.

• Booking requests: the learner's name, email address, telephone number and country of residence; the employer or organisation, if given; the course, delivery mode and requested date; anything you write in the message box; and the version of our Booking Terms you accepted, with the time you accepted them.
• Assessment enquiries (OIMCE and CROER): the contact's and the candidate's details, the employer's details, the candidate's role, and whether the employer has declared the candidate ready for assessment.
• Corporate enquiries: your name, organisation and contact details, the training you are interested in, and anything else you tell us about your requirement.
• Contact form: your name, email address and message.
• Technical information: to prevent spam and abuse, we keep a scrambled (hashed) form of your network address and the timing of your submission for a short time. We do not use it to identify you.

When you book, we also hold what we need to deliver the training: attendance, completion and assessment results, certificates, any eligibility or prerequisite evidence the course requires, and billing and tax details for invoices.

The website forms do not ask for health or medical information. Please do not include it in a message box.

If you give us details about someone else, such as a candidate or a colleague, please make sure they know you are sharing them with us and where to find this policy.

Why we collect it and on what basis

We use personal data to:

• respond to your booking request, enquiry or message, and arrange what you ask for. We need it to take the steps you request before, and under, a contract with you or your organisation.
• deliver training and assessment, and issue certificates. We need it to perform that contract. For OPITO courses and assessments, we must also send learner and result records to OPITO, the awarding body.
• report attendance, completion and results to the employer or organisation that arranged or paid for the training. This is needed for our contract with that organisation, and is in our and their legitimate interests.
• keep a record of the Booking Terms you accepted, so there is evidence of what was agreed. This is in our legitimate interests.
• keep the website secure and prevent spam and abuse. This is in our legitimate interests.
• issue invoices and keep accounting and tax records. The law requires this.

We do not use your details for marketing, and we do not sell them.

How long we keep it

We keep personal data only as long as we need it for the purposes above.

• Enquiries and messages that do not lead to a booking: until we have dealt with them and any follow-up. We then delete them.
• Booking, training and certificate records: as long as needed to deliver the training, meet OPITO's record-keeping requirements, confirm certificates when asked, and deal with any claim.
• Invoices and financial records: for the period Thai accounting and tax law requires.
• Technical anti-abuse information: a short time only.

Who we share it with

We share personal data only when we need to:

• Service providers who run the website and our email for us: website hosting (Lovable, which runs on Cloudflare's network), our database (Supabase), email delivery (Resend), our business email (Google Workspace), and website statistics (Plausible Analytics, which receives no form content). They handle data on our instructions.
• OPITO, the awarding body, based in the United Kingdom, for OPITO courses and assessments.
• The employer or organisation that arranged or paid for your training.
• Public authorities, where the law requires it.

Where it is stored and how we protect it

Our providers store and process data outside Thailand. Our database is in Singapore. Our hosting and email providers operate internationally, including in Japan, the United States and the European Union. Records sent to OPITO go to the United Kingdom. We use these providers because we need them to run the website and deliver what you ask for, and we rely on their data-protection terms to protect your data.

Information travels to and from this website over encrypted connections. Our database is not open to the public: only our own systems can read it. No system is completely secure, so we cannot guarantee security, but we take reasonable steps to protect your data.

Your rights

Under Thailand's Personal Data Protection Act B.E. 2562 (2019), you can ask us to:

• give you access to, and a copy of, your personal data;
• correct it;
• delete it, or restrict how we use it;
• stop using it, if you object to how we use it;
• send it to you, or to another organisation, in a commonly used format.

Where we rely on your consent, you can withdraw it at any time. This does not affect what we did before.

Some rights have limits, for example where the law requires us to keep records. We may need to confirm your identity before we act. We will reply within 30 days.

If you are unhappy with how we have handled your data, you can complain to the Office of the Personal Data Protection Committee in Thailand. We would welcome the chance to put things right first.

How to contact us

Email info@poseidontraining.com with "Personal data" in the subject line, or write to Poseidon Training Co., Ltd., Ocean Marina, 167/5 Moo 4 Sukhumvit Road, Na Jomtien, Sattahip, Chonburi 20250, Thailand.

Changes to this policy

We will update this policy when our practices change. The date at the top shows when it last changed.