Privacy Policy

1. Data Controller

The Faculty of Economics, Thammasat University ('we', 'us', or 'our') operates BE Portal and acts as the data controller for personal data collected through this Portal. We are committed to protecting your personal data in accordance with the Personal Data Protection Act B.E. 2562 (PDPA).

2. Data We Collect

We collect the following categories of personal data:

• Identity data: full name, student ID, national ID (stored as an irreversible hash)
• Contact data: institutional email address, phone number
• Academic data: enrolled courses, pre-registration preferences, academic year, programme
• Profile data: for alumni — career history, work experience, education, profile photo
• Usage data: login timestamps, IP address, browser type (for security and audit purposes)
• Cookie data: session identifiers and consent preferences (see Cookie Policy)

3. How We Use Your Data

We use your personal data to:

• Authenticate your identity and provide access to Portal services
• Process your pre-registration requests and notify you of results
• Maintain alumni profiles and facilitate alumni networking
• Communicate important updates, deadlines, and announcements
• Detect and prevent unauthorised access or abuse
• Comply with legal obligations under Thai law

4. Legal Basis for Processing

We process your personal data on the basis of: (a) performance of a service — to provide the Portal's core academic features; (b) legitimate interest — to maintain security and prevent fraud; and (c) your consent — for optional features such as alumni profile visibility and cookie preferences. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Retention

We retain personal data for as long as you have an active account or as required by university policy and Thai law. Academic records may be retained for up to 10 years following graduation. You may request deletion of non-mandatory data at any time by contacting us.

6. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Sensitive identifiers (e.g. national ID) are stored using one-way hashing. All data is stored on university-managed servers located within Thailand.

7. Your Rights (PDPA)

Under the PDPA, you have the right to:

• Access a copy of your personal data we hold
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal retention requirements)
• Restrict or object to processing in certain circumstances
• Withdraw consent for optional data processing
• Lodge a complaint with the Personal Data Protection Committee

8. Contact

To exercise your rights or if you have questions about this Privacy Policy, contact the Faculty of Economics, Thammasat University at [email protected].