Privacy Policy

1. Data Controller

The data controller for personal information collected through this website and our services is:

2. Personal Data We Collect

We collect personal data in the following ways:

a) Contact Form

When you submit an enquiry, we collect your name, email address, and optionally your phone number and message content.

b) During Service Delivery

When you engage with one of our programmes, we may collect family names, contact details for participating members, and notes from sessions. We handle session-related information under strict confidentiality protocols separate from this general privacy policy.

c) Cookies and Website Analytics

We use cookies and similar technologies to understand how visitors use our website. Please see our Cookie Policy for full details.

3. Legal Basis for Processing

• Consent: For marketing communications and analytics cookies, we rely on your consent, which you can withdraw at any time.
• Contractual necessity: For providing the services you have requested, including responding to enquiries and delivering programmes.
• Legitimate interests: For improving our website and services, provided those interests are not overridden by your rights.
• Legal obligation: Where we are required to process data to comply with Thai law.

4. How We Use Your Personal Data

• To respond to enquiries and provide information about our programmes
• To deliver our services and maintain records of service engagements
• To send administrative communications related to an ongoing engagement
• To analyse how our website is used and improve our content (where you have consented to analytics cookies)
• To comply with our legal and regulatory obligations under Thai law

We do not use personal data for automated decision-making or profiling. We do not sell your personal data to third parties.

5. Data Retention

• Enquiry data: Retained for 12 months from the date of last contact, then deleted unless a service engagement has commenced.
• Service engagement records: Retained for 5 years from the completion of the programme, in accordance with reasonable business practice.
• Analytics data: Retained in aggregate form; individual visitor data is not retained beyond 24 months.

6. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data, including:

• Encrypted storage of digital records
• Access controls limiting who can view personal information
• Physical security for paper-based documents
• Regular review of our data handling practices

In the event of a data breach affecting your personal information, we will notify you in accordance with the requirements of the Thailand PDPA.

7. Sharing Your Data with Third Parties

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers: We may use third-party services such as email providers and analytics platforms. These providers access personal data only to perform services on our behalf and are bound by confidentiality obligations.
• Legal requirement: Where required to do so by Thai law or a competent authority.
• With your explicit consent: For example, if you ask us to make a referral on your behalf to a professional specialist.

8. Cookies

Our website uses cookies to help it function and to understand how it is used. You can manage your cookie preferences at any time. Please see our Cookie Policy for a full explanation of the cookies we use and how to control them.

9. Your Rights Under the Thailand PDPA

Under Thailand's Personal Data Protection Act, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Ask us to delete your data where there is no legitimate reason for us to continue processing it.
• Right to portability: Request that we transfer your data to you or another organisation in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: Submit a complaint to the Office of the Personal Data Protection Committee (PDPC) of Thailand.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

10. Third-Party Websites

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend that you read their privacy policies independently.

11. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top. Material changes will be communicated to known contacts by email where appropriate. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

13. Contact for Privacy Matters

If you have questions, requests, or concerns about this policy or the handling of your personal data, please contact: