Privacy Policy

1. Introduction

Kithwell ("we", "our", "us") is committed to handling personal data with care and in a way that is consistent with Thai data protection law, including the Personal Data Protection Act B.E. 2562 (PDPA). This policy describes what data we collect when you use our website or participate in our programmes, how we use it, and what rights you have in relation to it.

If you have questions about this policy, please write to [email protected].

2. What Personal Data We Collect

We may collect the following types of personal data:

• Full name
• Email address
• Phone number (if provided)
• General message content submitted via our contact form
• Programme participation records (which sessions attended, dates)
• Technical data: IP address, browser type, pages visited (via cookies)

We collect data through our website contact form, programme registration, and in-person sign-in sheets at sessions.

3. How We Use Your Data

Personal data is used for the following purposes:

• Responding to enquiries submitted via the contact form
• Confirming programme registration and sending session information
• Sending follow-up information related to a programme you have attended
• Improving our website and programme offerings using aggregated, anonymised analytics
• Complying with legal obligations under Thai law

The legal basis for processing is your consent (for marketing communications), the performance of an agreement (for programme delivery), and our legitimate interest in operating and improving the organisation.

4. Data Retention

Contact form data is retained for up to 12 months after the most recent interaction. Programme participation records are retained for up to 3 years for administrative purposes. Analytics data is retained in aggregated form with no individual identification. You may request deletion of your data at any time (see Section 8).

5. Data Protection Measures

We store personal data on password-protected systems with access limited to Kithwell staff who need it to carry out their work. Data transmitted via our contact form is sent over an encrypted connection. We do not sell personal data and do not share it with third parties except as necessary to deliver our programmes or as required by law.

If we become aware of a data breach that is likely to affect your rights, we will notify affected individuals within 72 hours where this is required.

6. Cookie Information

We use cookies to keep the site functioning and to understand broadly how it is used. Essential cookies are always active. Analytics and preference cookies require your consent, which you can give or withdraw using the cookie banner on our homepage. For full details, see our Cookie Policy.

7. Third-Party Services

We may use third-party services including analytics tools (such as Google Analytics) and website hosting providers. These parties process data only in accordance with our instructions and applicable law. Links from our website to external sites are not covered by this policy.

8. Your Rights Under Thai PDPA

Under the Personal Data Protection Act B.E. 2562, you have the following rights:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data in certain circumstances
• Right to data portability — receive your data in a portable format where applicable
• Right to object — object to certain processing activities
• Right to withdraw consent — withdraw consent at any time without affecting prior processing

To exercise any of these rights, write to [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Personal Data Protection Committee of Thailand if you believe your data has been handled incorrectly.

9. Children's Data

Our website and online contact form are directed at adults (18 and over). We do not knowingly collect personal data from persons under 18 without verifiable parental consent. If you believe we have collected data from a minor without consent, please contact us at [email protected] and we will remove it promptly.

10. Policy Updates

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the website after a policy update constitutes acceptance of the updated terms. Material changes will be communicated by a notice on our homepage.

11. Contact

For data-related enquiries, write to:

• Email: [email protected]
• Post: Kithwell, 39 Thanon Surawong, Suriyawong, Bang Rak, Bangkok 10500, Thailand