Legal
Privacy Policy
Last Updated: 28 March 2026 · Kanya Thong · Phuket, Thailand
Kanya Thong ("we", "us", "our") is committed to handling your personal information with care and transparency. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what your rights are under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable international data protection standards.
If you have questions about anything in this policy, please contact us at [email protected].
1. Data We Collect
We collect personal data in the following circumstances:
- Contact enquiries: Name, email address, phone number, and any information you choose to include in your message.
- Programme registration: Name, contact details, and where relevant, scheduling preferences.
- Website usage: Anonymised analytical data (pages visited, session duration) via cookies, subject to your consent.
We do not collect sensitive financial data through our website. Personal financial information discussed during sessions is not recorded in any system.
2. How We Use Your Data
- To respond to your enquiry and provide programme information
- To confirm and administer your session registration
- To send pre-session preparation materials (where applicable)
- To conduct the post-programme follow-up call included in multi-session programmes
- To improve our website and understand how it is used (analytics cookies, with consent)
- To comply with applicable legal obligations
We do not use your personal data for marketing purposes without your explicit consent. We do not sell your data to any third party.
3. Legal Basis for Processing
We process your personal data on the following legal bases:
- Consent: Where you have agreed to the use of non-essential cookies, or opted in to receive communications.
- Contractual necessity: When processing is required to deliver a programme you have registered for.
- Legitimate interests: To respond to enquiries and maintain basic communication with people who have contacted us.
- Legal obligation: Where required by Thai law or applicable regulation.
4. Data Retention
We retain personal data only as long as reasonably necessary for the purpose it was collected. Enquiry records are held for up to 12 months. Programme registration records are retained for up to 3 years for administrative purposes. You may request deletion at any time (see Section 7).
5. Data Sharing
We do not share your personal data with third parties except in the following limited circumstances:
- Service providers: Email and hosting providers who process data on our behalf under appropriate agreements.
- Legal authorities: Where required by Thai law or court order.
We do not transfer your data outside Thailand except where your enquiry originates from abroad and a response is necessary.
6. Cookies
Our website uses cookies. Essential cookies are required for the site to function and cannot be disabled. Optional cookies (analytics, preferences) are only activated with your consent. You can manage your cookie preferences at any time via our Cookie Policy page.
7. Your Rights
Under Thailand's PDPA, you have the following rights:
- The right to access the personal data we hold about you
- The right to correct inaccurate or incomplete data
- The right to request deletion of your data (subject to legal retention obligations)
- The right to object to certain processing activities
- The right to withdraw consent at any time, without affecting the lawfulness of prior processing
- The right to data portability (in applicable circumstances)
- The right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC), Thailand
To exercise any of these rights, please contact us at [email protected]. We aim to respond within 30 days.
8. Data Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction. These include encrypted email communication, access controls on data systems, and a data handling policy for all team members. In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by law.
9. Third-Party Links
Our website may contain links to external resources. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
10. Children's Privacy
Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us promptly.
11. Policy Updates
We may update this Privacy Policy from time to time. When we do, the "Last Updated" date at the top will change. Continued use of our website or services after an update constitutes acceptance of the revised policy. We will notify registered programme participants of material changes by email.
12. Contact
Data Controller: Kanya Thong
Address: 61 Phuket Road, Talat Yai, Phuket 83000, Thailand
Phone: +66 76 384 219
Privacy enquiries: [email protected]