Back to the program

SRC Learning

Privacy Notice

Last updated: 30 September 2026

This notice explains how we collect, use, and protect your data when you use SRC Learning courses such as the Shoulder, Knee and Neck Survival Kits. Because these involve “health data” — a sensitive category — we handle it with extra care under Thailand's Personal Data Protection Act (PDPA).

In short

  • We collect only what is needed to care for your recovery
  • Your health data is used to tailor the program and keep you safe
  • We never sell your data or use it for advertising
  • You can view, correct, delete, or withdraw consent at any time

1. Who we are

TRM SOLUTION COMPANY LIMITED is the data controller and operator of the SRC Learning system at srcth.com.

2. What we collect

When you enroll and use a program, we collect only what is needed to care for you:

  • Contact details: nickname, full name (only when requesting a certificate), phone number
  • LINE account (if you sign in with LINE): user ID and profile picture, to identify and contact you
  • Enrollment/usage data: sign-up and activation dates, program status and progress
  • When you report a problem or leave a rating: what you typed, the contact you chose to give, the page you were on, your language and text-size setting, your screen size and browser version, so the team can trace the problem. We do not collect screenshots or your location.
  • Payment data: the buyer's name and phone number, and tax details if you ask for a tax invoice. If you pay by bank transfer, we keep the slip image and the details on it: the sender's name and bank, amount, date and time, and transaction reference. If you pay by card, you enter card details directly on the payment provider's page. We never see or store your card number
  • When you book an online physiotherapy session (Office Syndrome course): the times that suit you, your LINE ID or phone number for confirming the booking, and the message you write to the physiotherapist

3. Health data (sensitive)

To tailor your program and keep you safe, we collect: your safety-screening answers, symptom checklist (location, duration, timing of pain, swelling, aggravating movements), self-exam results, the symptom group assigned by the system, the pain levels you report each time, end-of-stage assessment results, daily exercise logs, and whether you are an athlete.

4. Legal basis and consent for health data

General data is processed based on consent and to perform our service agreement. Health data is processed based on the “explicit consent” you give at enrollment (the acceptance you tick before starting), under Section 26 of the PDPA.

5. How we use your data

  • Tailor the program and exercises to your symptom group
  • Track your progress and safety during the program
  • Refer you to a physiotherapist or doctor when warning signs appear
  • Issue certificates when you request them
  • Check transfer slips, confirm payments, and issue receipts and tax invoices
  • Arrange the online physiotherapy session you book
  • Follow up on your recovery, and send LINE notifications if you have added us as a friend

We do not sell your data to third parties, and we do not use your health data for advertising.

6. Who can access it

Only the SRC team and the physiotherapist/doctor caring for your program, and only as far as needed. Access is role-restricted and logged. If you book an online physiotherapy session, the physiotherapist from VKLARE Physiotherapy Clinic who meets you sees your name, booking times, contact channel, booking message and program details, only as far as needed.

7. External providers

We use providers only as needed, and all are bound to keep your data confidential:

  • Cloud and infrastructure: secure storage and backups
  • Payment provider: card or PromptPay payments, once that channel is available. We send the provider your name, the contact details you gave, and the amount
  • Slip verification (EasySlip): used when you pay by transfer. We send the slip image to be checked against the bank's records and receive the transfer details back: sender and recipient names, amount, date and time, and transaction reference
  • LINE: sign-in if you choose LINE, notifications if you have added our LINE account (such as slip check results and reminders to continue your program), and slip check alerts to our team's LINE group, which receive the buyer's name, the course and the amount

8. Retention

Kept while you use the service and as long as necessary or required by law, then deleted or anonymized. You may request deletion. Slips, receipts and tax invoices are kept for the periods required by accounting and tax law.

9. Your rights

You may access and copy your data, correct, delete, restrict, object, port it, and withdraw consent at any time. Note: withdrawing consent for health data may mean we can no longer provide your program.

10. Not medical treatment

The content and programs are educational self-care material, not a personal diagnosis or prescription. If you have severe symptoms — intense pain, weakness, arm numbness, fever, or a recent injury/surgery — please see a doctor.

11. Data security

Stored on secure cloud infrastructure, encrypted in transit and at rest, role-restricted access, with periodic backups.

12. Cookies

This site uses only cookies it needs to work. We do not use third-party advertising or analytics cookies:

  • Sign-in cookie, 30 days
  • Language choice, 1 year
  • Screening results taken before you sign in, and which stage guides you have already opened, 90 days
  • Temporary checkout cookies such as a discount code and tax invoice details, expiring within 1 hour
  • You can block cookies in your browser, but you will not be able to sign in or pay. If you pay on a payment provider's page, that page may use the provider's own cookies to prevent fraud, under the provider's policy

13. Minors and changes

This service is intended for adults; minors should use it under a guardian's consent. We may update this notice from time to time; the latest date is shown above.

To exercise your rights or ask about your personal data, contact contact@srcth.com or call 083-815-9442 — TRM SOLUTION COMPANY LIMITED