Privacy Policy

the operator of LearnTrader (a sole trader based in Thailand) (“we”) is the data controller.

Privacy contact: tondigitalonline@gmail.com

The merchant name verified with Stripe appears on your receipt, and we will give you the controller's full details by email straight away on request.

Account data: your email address and language, when you sign up or buy.

Purchase data from Stripe: transaction ID, amount, currency, date and refund status. We never receive your card number or card details.

Learning data: lessons you have finished (saved to your account when you are signed in).

Technical and security data: IP address, browser type and server request logs, used to rate-limit repeated requests, block bots and fix errors.

Aggregate visit statistics through Cloudflare Web Analytics, which uses no cookies and does not identify you.

We do not collect sensitive data such as health, religious or biometric data.

To create your account, give you the content you bought and save your progress (contract).

To send sign-in links, purchase confirmations and important account messages (contract).

To keep the service secure, prevent fraud and abuse, and improve it from aggregate statistics (legitimate interests).

To keep accounting and tax records and respond to authorities where the law requires (legal obligation).

We do not send marketing email unless you give separate consent, and you can unsubscribe at any time.

Without your email address we cannot create an account or deliver what you bought.

Processors acting on our behalf under data-protection terms: Stripe (payments), Resend (email delivery) and Cloudflare (hosting, database, security and visit statistics).

Public authorities, only where the law requires it.

We never sell, rent or trade your personal data, and we do not use it for tracking-based advertising.

These providers may process data outside your country, for example in the United States. We only transfer what is necessary, and the providers use legally recognised safeguards such as Standard Contractual Clauses, as required by Section 29 of the PDPA and the GDPR.

Account and progress data: while your account is active or until you ask us to delete it. Accounts with no purchase and no activity for 3 years are deleted.

Purchase records: as long as accounting and tax law requires (no more than 10 years).

Sign-in links expire after 20 minutes and are deleted within a day; rate-limit records are deleted within a day.

Server request logs: no more than 30 days.

You can ask to access and copy, correct, delete or restrict your data, object to processing, port your data, and withdraw consent (withdrawal does not affect earlier processing).

Email tondigitalonline@gmail.com from the address on your account. We reply within 30 days, free of charge.

You may complain to Thailand's Personal Data Protection Committee (PDPC) or to the data-protection authority in your country.

We use encrypted connections (HTTPS), digitally signed sign-in cookies, hashed sign-in links, restricted access to data, and we never store card details.

If a data breach is likely to put your rights at risk, we will notify the relevant authority within 72 hours as the law requires, and tell you without undue delay where the risk is high.

LearnTrader is not intended for anyone under 18. We do not knowingly collect their data, and we delete it if we find it.

We only use essential cookies. See the Cookie Policy.

We will announce material changes on the site or by email before they take effect. The date of the latest update is shown above.