Privacy Policy

1. Introduction

Suphan Siri ("we," "us," or "our") is a financial education provider based at 44 Rattanathibet Road, Mueang, Nonthaburi 11000, Thailand. We are committed to handling all personal data responsibly and transparently, in accordance with Thailand's Personal Data Protection Act (PDPA) B.E. 2562.

This Privacy Policy describes what personal information we collect, how we use it, how long we retain it, and what rights you have as a data subject. If you have questions, please contact us at [email protected].

2. Personal Data We Collect

We collect personal data through the following means:

• Enquiry and contact forms on our website: name, email address, and optionally phone number and message content.
• Workshop registration: name, email address, phone number, and employer or occupation where relevant.
• Payment processing: billing name and transaction reference (we do not store full card details).
• Website usage: through cookies and analytics tools (see Section 6).

We do not collect sensitive personal data (such as health information or financial account details) as part of our standard operations. Any financial figures discussed during workshops are handled verbally in a confidential group setting.

Legal basis for processing: consent (for marketing), contract performance (for workshop enrollment), and legitimate interests (for website operation and enquiry handling). Retention periods are typically 36 months for enquiry records and 60 months for enrollment records, consistent with Thai commercial record requirements.

3. How We Use Personal Data

• To respond to your enquiries about our programs
• To process and confirm workshop enrollment
• To send program-related communications (confirmation, reminders, materials)
• To maintain records required for business operations
• To analyze website usage and improve our content (in anonymized form where possible)
• To send occasional educational newsletters, if you have consented

We do not sell, rent, or trade personal data to third parties for their own marketing purposes.

4. Data Protection Measures

• Data transmitted through our website forms is encrypted via HTTPS/TLS.
• Access to stored personal data is limited to authorized Suphan Siri personnel on a need-to-know basis.
• We conduct periodic internal reviews of data handling practices.
• In the event of a data breach that affects your rights, we will notify you and the relevant Thai authority within the timeframes required by PDPA.

5. Third-Party Services

We may use the following third-party services, each of which operates under its own privacy terms:

• Google Analytics — anonymized website traffic analysis
• Email service providers — for sending program-related communications
• Payment processors — for secure transaction handling

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

6. Cookies

We use cookies on our website to enable core functionality, understand how visitors use the site, and remember your preferences. You can manage cookie preferences at any time through our Cookie Policy page, which also explains each cookie category in detail.

7. Your Rights Under PDPA

As a data subject under Thailand's Personal Data Protection Act B.E. 2562, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your data where no legal retention obligation applies
• Right to restriction — to request that we limit how we process your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — at any time for processing based on your consent, without affecting prior processing

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

8. Children's Privacy

Our programs are designed for adults 18 years and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently received data from a minor, please contact us immediately at [email protected] so we can take appropriate action.

9. International Data Transfers

Where we use third-party services whose servers are located outside Thailand (such as certain cloud email platforms), data transfers are conducted under contractual safeguards consistent with PDPA requirements for cross-border transfers.

10. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page will reflect any revision. Significant changes will be communicated via a notice on our website or directly to enrolled participants where appropriate.

Continued use of our website or services after a policy update constitutes acceptance of the revised terms.

11. Contact Information

For privacy-related enquiries or to exercise your rights:

• Email: [email protected]
• Phone: +66 2 951 4278
• Address: Suphan Siri, 44 Rattanathibet Road, Mueang, Nonthaburi 11000, Thailand