Data and Privacy Policy for MyCulture.ai

Introduction

MyCulture.ai ("we," "our," or "us") is committed to protecting the privacy and security of all data collected from our users and organizations. This Data and Privacy Policy outlines how we collect, use, store, and disclose data in compliance with applicable laws and regulations, ensuring transparency and trust. This policy adheres to the Personal Data Protection Act (PDPA) of Thailand and its requirements for handling personal data responsibly.

Scope

This policy applies to all users ("you") of the MyCulture.ai platform, including individual employees, administrators, and organizations that utilize our culture assessment and analytics services.

Data Collection

1. Types of Data Collected

We collect the following types of data:

Personal Information: Includes names, email addresses, job titles, and demographic details such as age and gender (when provided).
Assessment Data: Includes responses to survey questions, feedback, and other inputs related to culture assessment.
Usage Data: Includes log information, IP addresses, device types, browser types, and interaction data on the platform.
Aggregated Data: Statistical or anonymized data derived from assessment and usage data, which cannot identify individuals.

2. How Data is Collected

Directly from Users: Through registration, survey participation, and other interactions with the platform.
From Organizations: Data shared by organizations to set up accounts and contextualize assessments.
Automatically: Via cookies and similar technologies to monitor platform usage and performance.

Data Usage

We use the collected data for the following purposes:

To deliver culture assessment insights and analytics to users and organizations.
To improve platform functionality and user experience.
To communicate updates, reports, and other relevant information.
To ensure compliance with legal obligations and protect against misuse.
To conduct research and development in an aggregated and anonymized form.

Data Sharing

We do not sell or rent your personal data. We share data only in the following circumstances:

With Your Organization: Aggregated insights and reports are shared with the organization administering the culture assessments.
Service Providers: Trusted third-party vendors that assist in platform operations, under strict confidentiality agreements.
Legal Requirements: When required to comply with legal obligations, enforce agreements, or protect rights.
Business Transfers: In case of mergers, acquisitions, or sales of business assets, subject to data protection standards.

Data Security

We employ robust measures to protect your data:

Encryption: All data is encrypted during transmission and at rest.
Access Control: Limited access to data based on role and necessity.
Regular Audits: Periodic security assessments to identify and mitigate risks.
Incident Response: A dedicated protocol to handle potential breaches, including notification to affected individuals and the Personal Data Protection Commission (PDPC) of Thailand where required.

Data Retention

We retain your data only as long as necessary for the purposes outlined in this policy or as required by law. When data is no longer needed, we securely delete or anonymize it in compliance with PDPA’s guidelines on data retention.

User Rights

As a user, you have the following rights:

Access: Request access to your personal data.
Correction: Request corrections to inaccurate or incomplete data.
Deletion: Request deletion of your data, subject to legal and contractual obligations.
Restriction: Limit the processing of your data under certain circumstances.
Data Portability: Receive your data in a structured, commonly used format.
Withdraw Consent: Withdraw consent for data processing where applicable.
Complaint: Lodge a complaint with the PDPC if you believe your data has been mishandled.

Requests to exercise these rights can be submitted to support@myculture.ai.

Cookies and Tracking

We use cookies to:

Enhance platform functionality and performance.
Analyze platform usage for improvements.
Provide a personalized experience.

You can manage your cookie preferences through browser settings or platform options.

Cross-Border Data Transfers

If your data is transferred outside Thailand, we ensure that the recipient organization provides a standard of data protection comparable to that under the PDPA. This includes the use of legally enforceable agreements and mechanisms such as Standard Contractual Clauses.

Updates to This Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. Any significant changes will be communicated to you through the platform or email notifications.

Contact Information

For questions or concerns about this policy, please contact us at:

MyCulture.ai
Email: support@myculture.ai
Address: 202 Surawong Road, Bangkok, Thailand 10500

By using MyCulture.ai, you acknowledge that you have read and understood this Data and Privacy Policy and consent to the practices described herein.