Privacy Policy

1. Who We Are

Kinfold is an educational and administrative services organisation based in Bangkok, Thailand. Our registered address is 64 Sathon Tai Road, Thung Maha Mek, Sathon, Bangkok 10120. You may contact us at any time regarding privacy matters at [email protected] or by telephone at +66 2 287 6914.

2. Information We Collect

We collect personal information only when it is necessary for a clear purpose. The categories of information we may collect include:

• Contact details — your name, email address, and telephone number, provided when you submit an enquiry form or register for a service.
• Service enrolment details — the programme or workshop you are interested in, and any scheduling preferences you share with us.
• Website usage data — pages visited, session duration, and device type, collected through analytics tools subject to your cookie consent.
• Communications — messages you send us by email or through our website contact form.

We do not collect sensitive personal data (such as health information, financial records, or identification documents) unless you choose to share such details in a message to us, in which case we handle them with heightened care and do not retain them beyond the purpose for which they were shared.

3. Legal Basis for Processing

Under the PDPA, we process your personal data on one or more of the following lawful bases:

• Consent — for optional communications such as email updates and for the placement of non-essential cookies. You may withdraw your consent at any time.
• Contractual necessity — to fulfil a service you have registered for or to respond to an enquiry you have submitted.
• Legitimate interests — to maintain the security and performance of our website, and to understand how our services are being used, provided these interests do not override your rights.
• Legal obligation — where we are required by Thai law to retain or disclose certain records.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and provide the service or programme you have registered for.
• To send you booking confirmations, session reminders, and follow-up materials related to your enrolment.
• To improve our website and educational materials based on aggregated, anonymised usage patterns.
• To fulfil any legal or regulatory obligations that apply to our organisation.

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

5. Marketing Communications

We may occasionally send you information about our services or upcoming workshops if you have given us clear consent to do so. Every such message will include a straightforward way to opt out. We will not send marketing communications without your prior consent, and we will honour opt-out requests promptly — within five business days as a general rule.

6. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share it with the following parties only where necessary:

• Service providers — companies that help us operate our website, manage bookings, or process payments, subject to contractual confidentiality obligations.
• Analytics providers — tools such as Google Analytics, used in anonymised or aggregated form to understand website usage (subject to your cookie preferences).
• Legal authorities — where disclosure is required under Thai law or by a court order.

Any third-party service providers who handle personal data on our behalf are required to do so only for the specified purpose and under appropriate data protection terms.

7. International Data Transfers

Some of our service providers (including analytics and email tools) are based outside Thailand. Where personal data is transferred internationally, we take steps to ensure that an adequate level of protection is in place, consistent with the requirements of the PDPA and any implementing regulations.

8. Data Retention

We retain personal data only for as long as it is needed for the purpose for which it was collected, or as required by applicable law. In practice:

• Enquiry and contact records are typically retained for up to two years from your last interaction with us.
• Service enrolment records are retained for up to five years to accommodate reasonable administrative needs.
• Analytics data is retained in aggregated, anonymised form for longer periods.

When data is no longer needed, we delete or anonymise it securely.

9. Your Rights Under the PDPA

As a data subject under Thai law, you have the following rights in relation to your personal information held by Kinfold:

• Right to access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct any inaccurate or incomplete information.
• Right to erasure — to request deletion of your data where there is no longer a lawful basis for us to hold it.
• Right to restriction — to ask us to limit how we use your data while a concern is being resolved.
• Right to portability — to receive your data in a structured, machine-readable format where applicable.
• Right to object — to object to processing based on our legitimate interests or for direct marketing purposes.
• Right to withdraw consent — at any time, for processing that is based on your consent, without affecting prior processing.

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. You can read full details about which cookies we use and how to manage them in our Cookie Policy. When you first visit our website, we present a cookie notice that lets you accept or decline non-essential cookies. Your preference is stored locally and can be changed at any time.

11. Security

We apply reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or loss. Our website uses HTTPS encryption for data in transit. Access to personal data within our organisation is restricted to staff who need it to carry out their responsibilities.

No system is entirely without risk. If we become aware of a personal data breach that poses a risk to your rights, we will take appropriate steps in line with PDPA requirements.

12. Children's Privacy

Our website and services are directed at adults. We do not knowingly collect personal data from anyone under the age of 18 without verifiable parental or guardian consent. If you believe a minor has submitted personal data to us without appropriate consent, please contact us and we will promptly review and address the matter.

13. Links to Other Websites

Our website may contain links to external sites for reference or convenience. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

14. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or in applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after an update constitutes acceptance of the revised policy.

15. Contact Us

If you have questions about this policy, wish to exercise your rights, or have a concern about how we handle your data, please reach out:

• Email: [email protected]
• Phone: +66 2 287 6914
• Post: 64 Sathon Tai Road, Thung Maha Mek, Sathon, Bangkok 10120, Thailand

You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee if you believe your rights under the PDPA have not been respected.