Privacy Policy
How we protect and handle your personal information
Introduction and Overview
At SystemNextStep, we understand that your privacy matters deeply. This policy explains how we collect, use, and protect your personal information when you interact with our algorithms and data structures education platform. We're committed to transparency about our data practices and your rights under Thailand's Personal Data Protection Act (PDPA) and international privacy standards.
Our educational platform serves students and professionals in Thailand and internationally. We believe privacy isn't just about compliance – it's about building trust with our learning community. This document will walk you through exactly what we do with your information and how you can control it.
Key principle: We only collect information that directly helps us provide better educational experiences or is required for platform functionality.
Information We Collect
Understanding what information we gather helps you make informed decisions about using our platform. We collect different types of information through various interactions with our service.
Account Information
When you create an account, we collect your name, email address, chosen password, and educational background. We also store your learning preferences and progress tracking data to personalize your experience.
Learning Activity Data
We track your progress through courses, quiz results, project submissions, and time spent on different topics. This helps us understand learning patterns and improve our curriculum effectiveness.
Technical Information
We automatically collect IP addresses, browser type, device information, and how you navigate through our platform. This helps us maintain security and optimize performance across different devices.
Communication Records
When you contact our support team or participate in forums, we store these communications to provide better assistance and maintain community guidelines.
We do NOT collect: Payment card details (processed securely by third-party providers), sensitive personal data like health records, biometric information, or detailed browsing history outside our platform.
How We Use Your Information
Every piece of information we collect serves specific purposes that directly benefit your learning experience or help us maintain a secure, effective platform.
Educational Services: We use your progress data to recommend appropriate next steps in your learning journey, identify areas where you might need additional practice, and customize content difficulty to match your current skill level.
Platform Improvement: Learning analytics help us understand which topics students find challenging, which teaching methods work best, and where we can enhance our curriculum. We look at aggregated patterns, not individual performance details.
Communication and Support: We use contact information to send important updates about your courses, respond to your questions, and notify you about new features that might interest you based on your learning focus areas.
Security and Compliance: Technical data helps us detect suspicious activities, prevent unauthorized access, and comply with legal requirements in Thailand and other jurisdictions where our students are located.
Information Sharing and Third Parties
We're selective about who we share information with. Most of your personal data stays within our platform, but some carefully controlled sharing helps us provide better services.
We never sell personal information to marketers, data brokers, or advertising networks. Your learning data isn't a commodity to us.
Service Providers: We work with trusted companies that help us operate our platform – cloud hosting providers, email delivery services, and payment processors. These partners can only use your information for the specific services they provide to us, under strict contractual protections.
Legal Requirements: We may disclose information when required by Thailand law enforcement, court orders, or to protect our platform from fraud or security threats. We'll notify you about such requests unless legally prohibited.
Business Transfers: If SystemNextStep is acquired or merged with another company, your information would be transferred as part of that transaction, but the new owners would still be bound by this privacy policy.
Your Privacy Rights
Under Thailand's PDPA and international privacy laws, you have significant control over your personal information. Here's what you can do and how to exercise these rights.
Access Your Data
Request a complete copy of all personal information we have about you, including your learning progress, account details, and communication history.
Correct Inaccuracies
Update or fix any incorrect personal information in your account. Most details can be changed directly in your profile settings.
Delete Your Account
Request complete deletion of your account and associated data. We'll remove your information within 30 days, except where required by law to retain certain records.
Data Portability
Get your personal data in a structured format that you can transfer to another education platform or service provider.
Restrict Processing
Limit how we use your information for specific purposes while keeping your account active for core educational services.
Withdraw Consent
Opt out of non-essential data processing activities like marketing communications or optional analytics programs.
How to exercise your rights: Email us at support@systemnextstep.com with your request. We'll respond within 30 days and may need to verify your identity for security purposes. Most requests are processed at no cost, though we may charge reasonable fees for excessive or repetitive requests.
Data Security and Protection
Protecting your information is a continuous priority, not an afterthought. We've implemented multiple layers of security to safeguard your personal data against unauthorized access, alteration, or disclosure.
Technical Safeguards: We use industry-standard encryption for data transmission and storage, secure server configurations with regular security updates, and access controls that limit who can view your information. Our platform undergoes regular security assessments and vulnerability testing.
Operational Security: Our team members receive privacy training and are bound by confidentiality agreements. We maintain detailed logs of who accesses what information and regularly review these for unusual patterns. Data backups are encrypted and stored securely.
While we implement strong security measures, no system is completely foolproof. We'll notify you promptly if we discover any security incident that affects your personal information.
Your Role in Security: Choose strong, unique passwords for your account. Log out when using shared computers. Be cautious about phishing emails that might request your login credentials – we'll never ask for your password via email.
Data Retention and Deletion
We don't keep your information forever. Our retention practices balance your privacy rights with legitimate business needs and legal requirements.
Active Accounts: While your account is active, we maintain your learning progress, course completions, and profile information to provide continuous service. Communication records are typically kept for two years to help resolve any questions about your courses.
Inactive Accounts: If you don't log in for 18 months, we'll send reminder emails before automatically deleting non-essential data. Core account information remains for 24 months after last activity to allow easy reactivation of your learning journey.
Deleted Accounts: When you request account deletion, we remove personal identifiers within 30 days. Some information may be retained in anonymized form for educational research or aggregated statistics that help improve our curriculum.
Legal Retention: Some records may be kept longer when required by Thailand law, such as financial transaction records or evidence of Terms of Service violations. These exceptions are limited in scope and duration.
International Data Transfers
Our platform serves students globally, which sometimes requires transferring your information across borders. We take extra precautions to ensure your privacy remains protected regardless of where your data is processed.
Where Your Data Goes: Our primary servers are located in secure data centers with strong privacy laws. Some service providers may process information in other countries, but only under contracts that require them to maintain equivalent privacy protections.
Transfer Safeguards: When transferring data internationally, we use standard contractual clauses approved by privacy authorities, ensure receiving countries have adequate protection laws, or implement additional technical measures like enhanced encryption.
We never transfer your personal information to countries or organizations that don't provide adequate privacy protections equivalent to Thailand's PDPA requirements.
Cookies and Tracking Technology
Like most educational platforms, we use cookies and similar technologies to enhance your learning experience and understand how our platform is used.
Essential Cookies: These keep you logged in, remember your preferences, and ensure our platform works properly. You can't disable these without affecting core functionality, but they don't track you across other websites.
Analytics Cookies: We use these to understand which features are most helpful and where students encounter difficulties. This helps us improve course design and platform usability. You can opt out of analytics tracking in your account settings.
Your Cookie Control: Your browser settings allow you to block or delete cookies, though this may affect your learning experience. We provide clear options in your account dashboard to control optional tracking.
Children's Privacy
Our platform focuses on algorithms and data structures education, typically attracting university students and professionals. However, we recognize that some younger learners may access our content.
Age Requirements: Users must be at least 16 years old to create accounts independently. Younger students need parental consent and supervision. We don't knowingly collect personal information from children under 13 without explicit parental permission.
Parental Rights: Parents can request access to their child's account information, ask us to delete their child's data, or restrict certain data collection activities. Contact us at support@systemnextstep.com for assistance with minor accounts.
If we discover we've inadvertently collected information from a child without proper consent, we'll delete it immediately and take steps to prevent similar occurrences.
Policy Updates and Changes
Privacy practices evolve as technology advances and laws change. We'll update this policy periodically to reflect new practices, regulations, or platform features.
How We Notify You: Significant changes will be announced via email and prominent notices on our platform at least 30 days before taking effect. Minor clarifications or formatting updates may be made without advance notice.
Your Options: If you disagree with policy changes, you can download your data and delete your account before the changes take effect. Continued use of our platform after changes become effective indicates your acceptance of the new terms.
Recent Updates: This policy was last revised on January 15, 2025, to clarify our data retention practices and enhance explanations of your privacy rights under current Thailand regulations.
Questions About Your Privacy?
Contact our Privacy Team at support@systemnextstep.com
Mail: 33 Karnjanavanit Soi 5 Rd, Kho Hong, Hat Yai District, Songkhla 90110, Thailand
Phone: +66 39 436 316