Privacy and data handling at cybrixfy

Definitions

This section explains the main terms used in this privacy policy so readers can quickly understand which data, parties and processes the policy refers to.

Why We Process Personal Data

We process personal data for well-defined purposes directly related to operating cybrixfy, delivering courses, securing the platform, and improving the learner experience through practical case-based insights.

• User account creation, authentication, and profile management to give you access to purchased courses and personalized learning paths.
• Course delivery and assessments including grading, feedback and issuing course completion records.
• Billing, invoices and payment processing for course purchases and refunds via third-party payment providers.
• Customer support and dispute resolution when you contact support or instructors regarding platform issues or course content.
• Platform security, fraud detection and abuse prevention to protect learners and the integrity of our case scenarios and community.
• Product improvement through analytics and user research to refine hands-on scenarios and add relevant case studies based on real usage patterns.
• Legal compliance and enforcement of our terms, including responding to lawful requests from authorities.
• Communications about courses, updates, and optional marketing where you have given consent or have an existing business relationship with cybrixfy.

Legal Basis for Processing

Where applicable under data protection frameworks, we rely on the following lawful bases to process personal data in the areas described above.

• Performance of a contract: processing necessary to deliver the services you have requested, such as course access and billing.
• Consent: where we ask for explicit consent to send marketing communications or to process certain optional data you provide for exercises.
• Legitimate interests: where processing is necessary for platform security, fraud prevention, analytics and improving educational offerings, balanced against your rights.
• Legal obligation: when we must process or disclose data to comply with legal duties or to respond to lawful requests from authorities.

EU-Style Data Rights and Protections

Although cybrixfy operates from Thailand, we adopt many EU-style data protection principles to provide transparent controls for learners worldwide. The following summaries explain those rights and how to exercise them.

• Right of access: request a copy of personal data we hold about you and information about how it is processed.
• Right to rectification: request correction of inaccurate or incomplete personal data in your profile or records.
• Right to erasure: request deletion of personal data when it is no longer necessary for the purposes collected or you withdraw consent for optional processing.
• Right to restrict processing: request limited processing of your personal data while disputes or verifications are resolved.
• Right to data portability: request a machine-readable copy of personal data you provided to move to another service where technically feasible.
• Right to object: object to processing based on legitimate interests or for direct marketing; we will review and respond in accordance with applicable law.

Cookies and Similar Technologies

We use cookies and similar tracking technologies to support sessions, remember preferences, measure usage, and run platform analytics. You can control cookie settings through your browser or our cookie banner.

Types used include session cookies (temporary), persistent cookies (to remember preferences), and third-party cookies for analytics and performance measurement.

Categories include strictly necessary cookies for core platform function, performance and analytics cookies to improve courses, and optional marketing cookies used only with consent.

To manage cookies, use your browser settings or the cookie controls presented at first visit to cybrixfy.digital. Disabling certain cookies may affect platform features and course functionality.

View our full cookie policy at https://cybrixfy.digital/cookie-policy for details on each cookie and how to opt out of specific categories.

How We Share Data

We only share personal data with parties necessary to operate the platform, deliver courses, or as required by law. Third-party partners are subject to contractual privacy and security obligations.

• Service providers: cloud hosting, analytics, email delivery and payment processors who act on our behalf to provide the platform and course services.
• Instructors and teaching partners for courses you enroll in, where sharing of your name or performance data is necessary for course administration.
• Legal and regulatory authorities when required by law or to respond to valid legal requests.
• Corporate buyers or partners as part of a business transaction, merger, or asset sale; we will require the buyer to honor privacy commitments.
• Aggregated and anonymized data shared publicly or with partners to illustrate outcomes of case studies without identifying individual users.
• With your explicit consent for other third-party integrations that enable additional functionality within course exercises or community features.

International Data Transfers

Data processed by cybrixfy may be transferred to and stored in locations outside your country, including Thailand and service provider jurisdictions. We implement appropriate safeguards such as contractual protections and technical measures to protect data in transit and at rest.

Safeguards include standard contractual clauses with processors, encryption of data in transit, and minimum-security requirements for third-party providers. Contact our privacy team for details about specific transfer arrangements.

Data Retention

We retain personal data only as long as necessary for the purposes described, to fulfill contractual or legal obligations, and to support legitimate business needs such as fraud prevention and historical auditability.

Account records are retained for the duration of your active account and for a reasonable period thereafter to support account recovery, compliance and dispute resolution.

Messages, forum posts and submitted assignments are retained for the period necessary to provide learning services and to preserve course integrity; you can request deletion where feasible.

Security logs and access records are retained for a limited period to enable incident response and forensic analysis in case of suspected abuse or security events.

When retention periods end or upon valid deletion requests, we securely delete or anonymize personal data unless legal obligations require continued storage. Deletion may not remove copies retained in backups for a limited period.

Security Measures

We apply industry standard technical and organizational measures to protect personal data against unauthorized access, loss, alteration and disclosure. Security practices are reviewed regularly and tested as part of our operational routines.

• Encryption in transit (TLS) and encryption at rest for sensitive data where applicable to reduce risk of unauthorized disclosure.
• Access controls, multi-factor authentication for administrative access, and role-based permissions to minimize internal exposure of personal data.
• Regular security assessments, patch management and monitoring to detect and respond to incidents affecting the cybrixfy platform.

Your Privacy Rights

You can exercise a range of rights over your personal data. We handle requests promptly, verifying identity when necessary to protect personal data from unauthorized access.

• Access: request a copy of personal data we process about you and an explanation of processing activities.
• Rectification: correct inaccurate or incomplete information in your account or learner records.
• Erasure: request deletion of personal data that is no longer necessary or where consent has been withdrawn for nonessential processing.
• Restriction: request temporary limitations on processing while a dispute about accuracy or lawful basis is resolved.
• Portability: request a machine-readable copy of data you provided for use in another service where technically feasible.
• Objection: object to processing based on legitimate interests or to direct marketing; we will consider the objection and respond accordingly.
• Withdraw consent: when processing is based on consent, you can withdraw consent for future processing without affecting prior lawful processing.
• Lodge a complaint: you may lodge a complaint with a relevant supervisory authority if you believe your data rights have been infringed.

How to Submit a Rights Request

To exercise your rights, contact our privacy team at [email protected] or send a written request to our office at Soi Yaowarad 2/2, Talat Yai Sub District, Amphoe Mueang Phuket District, Phuket Province 83000, Thailand. Include your full name, email associated with the account, a clear description of the request and any relevant supporting documents.

[email protected]

We aim to respond to rights requests within a reasonable timeframe and in any case within 30 days of receipt. Complex requests or those requiring verification may take longer; we will inform you if an extension is necessary.