Legal

Privacy Policy

Last updated: 17 September 2026

YEAH Association ("YEAH", "we") is the data controller for personal data you provide through this website and other YEAH applications (including YEAH Future Talent). This policy explains how we collect, use, and protect your personal data under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

1. Data we collect

  • From Google OAuth: name, surname, email, profile picture (when you sign in with Google)
  • Member data: nickname, birthday, phone, university, faculty, year, education level, occupation, department, province, referral source
  • Program application data: target skill, motivation, experience, attached evidence/portfolio
  • Journey data: Goals, Checkpoints, Growth Evidence, attendance evidence
  • Technical data: a session cookie used solely for authentication (httpOnly; not used for advertising or behavioral tracking)

2. Why we use it

  • Creating and managing your YEAH Member account
  • Screening and deciding on YEAH Future Talent program applications — AI may assist by summarizing information, but every approval or rejection is made by a YEAH staff member, never by an automated system alone
  • Letting Mentors track progress and give feedback during the program
  • Preparing and issuing your Certificate on completion
  • Sending news and updates (only if you opted in — kept separate from required consents)

3. Legal basis

We process your data based on the explicit consent you give during registration and program application. You may withdraw consent at any time by contacting us below; doing so may limit your ability to use certain features.

4. Who sees your data

Access is role-scoped:

  • Mentors only see members on their assigned team, and never see phone number or birthday unless relevant to their work
  • YEAH Reviewers / Program Admins see application and profile data for screening and approval
  • Infrastructure processors acting on our behalf: Google (authentication only), and our database/hosting providers, which may be located outside Thailand — we apply appropriate safeguards as required by law

We do not sell your personal data to third parties for marketing purposes.

5. Retention

We keep your data for as long as your account is active, or as needed for the purposes described, including an audit log of approvals that we retain for transparency and accountability. You may request account deletion; some records may need to be retained longer where required by law.

6. Your rights under PDPA

  • Access and request a copy of your personal data
  • Request correction of inaccurate data
  • Request deletion or restriction of processing
  • Withdraw consent
  • Object to processing
  • Lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe we are not complying with the law

7. Contact us

YEAH Association
Email: admin@yeah.or.th
Facebook: YEAH Entrepreneur Hub

You may exercise your PDPA rights through the contact above; we respond within 30 days.