HADA Aesthetic Training
Privacy policy
Last updated September 2026 · Version v1
This policy explains what personal data HADA Aesthetic Training ("HADA", "we", "us") collects through this website, why we collect it, and the choices you have. It applies to every account on this site, including an individual account and a seat created through a class's shared login.
We are a clinical training provider based in Thailand, and we handle personal data under the Personal Data Protection Act B.E. 2562 (2019) ("Thailand PDPA").
Information we collect
- Account details you give us directly: full name, email address, and (for an individually-registered account) phone number, clinic role, clinic name, and province.
- Login and security data: your password (stored as a one-way hash we cannot read), and — if you use a class's shared login — a device token stored in your browser so we can recognise your device on return visits without asking for the shared password to be re-typed every time.
- Course activity: which sessions and lessons you view, your completion progress, and (if you book one) your timetable bookings.
- Anything you send us: messages through the Contact us widget or Q&A feature, and any content of those messages.
How we use it
- To create and secure your account, including email verification and two-factor authentication.
- To deliver the curriculum to you and track your own progress through it.
- To respond to questions or requests you send us.
- To keep the class-login system working as intended — recognising a returning device and enforcing each class's seat limit.
- We do not sell your personal data, and we do not use it for advertising.
Who else sees it
- A specialized third-party cloud database and authentication provider stores your account and course-progress data securely on our behalf, under a data-processing agreement that limits them to our instructions.
- A specialized third-party video-hosting provider hosts the video lessons you watch; playing a video may share standard technical information (such as your IP address) with that provider.
- We do not share your personal data with any other third party except where required by law.
How long we keep it
- We keep your account and course-progress data for as long as your account is active, and for a reasonable period afterward for training-record and legal purposes. You can ask us to delete your account at any time (see "Your rights" below).
Your rights
- Under the Thailand PDPA, you have the right to access, correct, delete, or request a copy of your personal data, and to withdraw consent at any time. Withdrawing consent does not affect anything we did with your data before the withdrawal.
- To exercise any of these rights, use the Contact us button on this site and we will respond as soon as we reasonably can.
Cookies and device recognition
- We use a small number of strictly necessary cookies: one to keep you signed in, and — only if you use a class's shared login — one that lets your specific device be recognised on return visits. We do not use advertising or tracking cookies.
Changes to this policy
- If we make a material change to this policy, we will ask new registrants to agree to the updated version going forward. We will not retroactively require an existing account to re-accept it.
Contact us
- For any question about this policy or your personal data, use the Contact us button available throughout this site.
Back to home.