Privacy Policy

1. Introduction

Krathong Arc is committed to protecting the privacy and personal information of individuals who participate in our financial education programs. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with Thailand's Personal Data Protection Act (PDPA) and international privacy standards.

We take your privacy seriously and handle all information with care and respect. If you have questions about this policy, please contact us at [email protected].

2. Information We Collect

We collect personal information that you provide to us when you:

• Inquire about our programs through our website contact form
• Enroll in one of our financial education programs
• Communicate with us via email or telephone
• Participate in program sessions and activities

The types of personal information we may collect include:

• Name and contact details (email address, phone number, mailing address)
• Demographic information (age, location within Bangkok)
• Program preferences and educational background
• Financial learning objectives and areas of interest
• Feedback and program evaluation responses
• Payment information for program enrollment (processed securely through third-party payment processors)

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and deliver our financial education programs and services
• To communicate with you about program schedules, updates, and materials
• To personalize your learning experience and tailor content to your needs
• To process program enrollment and payment transactions
• To respond to your inquiries and provide customer support
• To improve our programs based on participant feedback and experiences
• To comply with legal obligations under Thai law
• To send you information about programs that may be of interest (with your consent)

4. Legal Basis for Processing

Under the PDPA, we process your personal data based on:

• Consent: When you provide consent for us to contact you about our programs
• Contract Performance: To fulfill our obligations under program enrollment agreements
• Legitimate Interests: To improve our services and operate our business effectively
• Legal Compliance: To comply with Thai legal and regulatory requirements

5. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: We work with trusted third-party service providers who assist with payment processing, email communications, and program administration. These providers are contractually obligated to protect your information and use it only for specified purposes.
• Program Facilitators: Information necessary for program delivery is shared with our certified facilitators who are bound by confidentiality agreements.
• Legal Requirements: We may disclose information when required by Thai law or in response to valid legal processes.

We never share your financial learning objectives, personal circumstances discussed during programs, or program feedback with external parties without your explicit consent.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure servers with restricted access controls
• Regular security audits and updates
• Staff training on data protection and confidentiality
• Secure disposal procedures for physical and digital records

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy. Specifically:

• Contact inquiry information: Up to 2 years from last contact
• Program participant information: 5 years after program completion for follow-up support and program improvement
• Financial transaction records: 7 years as required by Thai accounting regulations
• Marketing consent records: Until consent is withdrawn

8. Your Rights Under Thai Law

Under the PDPA, you have the following rights regarding your personal data:

• Right to Access: Request access to your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time
• Right to Lodge a Complaint: File a complaint with the Personal Data Protection Committee of Thailand

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days as required by law.

9. Cookies and Website Usage

Our website uses cookies to enhance user experience and analyze website traffic. For detailed information about our use of cookies, please refer to our Cookie Policy.

We use:

• Essential cookies for basic website functionality
• Analytics cookies to understand how visitors use our site (with your consent)

10. Third-Party Links

Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

11. Children's Privacy

Our programs are designed for adults aged 18 and over. We do not knowingly collect personal information from individuals under 18 years of age. If we discover that we have collected information from a minor, we will delete it promptly.

12. International Data Transfers

Your personal data is primarily stored and processed in Thailand. If we need to transfer data outside Thailand, we will ensure appropriate safeguards are in place as required by the PDPA, including standard contractual clauses or adequacy decisions.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify participants via email and update the "Last Updated" date at the top of this policy. Continued use of our services after such modifications constitutes acceptance of the updated policy.

14. Contact Information

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: