Privacy policy

The Muay Thai University is the online training service of Siam Boxing, Bangkok, available at themuaythaiuniversity.com. This policy explains what personal data we collect when you use the service, why we collect it and what we do with it. If anything here is unclear, email us at info@themuaythaiuniversity.com.

We keep the data we hold to the minimum the service needs to run:

• Account details — your name, email address and a securely hashed version of your password. We never store your password in readable form.
• Membership details — which plan you are on, its status and renewal date.
• Watch progress — which lessons you have watched and how far through them you are, so you can pick up where you left off.
• Security records — sign-in times and basic technical details (IP address, browser) attached to your active sessions, used solely to keep your account secure.

We use a single, strictly necessary cookie: a session cookie that keeps you signed in. We do not use advertising cookies, analytics cookies or any third-party tracking. Because the session cookie is essential for the service to work, no cookie consent banner is required.

When paid memberships go live, payments will be processed by Stripe, a PCI-DSS certified payment provider. Your card details are entered directly with Stripe and never touch our servers. We receive only confirmation of payment and the details needed to manage your membership. Stripe’s handling of your data is covered by its own privacy policy.

We use your data to provide the service: signing you in, showing you the right content for your membership, remembering your progress and emailing you about your account (for example, password resets or important changes to the service). We do not sell your data, and we do not share it with third parties except where needed to run the service (such as Stripe for payments) or where the law requires it.

We keep your account data for as long as your account exists. Expired sessions are removed automatically. If you close your account, we delete your personal data within 30 days, except where we are legally required to keep records (for example, records of past payments).

Under UK data protection law (UK GDPR), you have the right to access the personal data we hold about you, to have it corrected if it is wrong, to have it deleted, and to object to or restrict how we use it. To exercise any of these rights, email info@themuaythaiuniversity.com and we will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

If we change this policy in a way that matters, we will update the date at the top of this page and, where the change is significant, email account holders before it takes effect.