Privacy Policy

1. Introduction

Khao Finance ("we", "us", "our") is committed to protecting the personal information of those who use our educational programs and website. This Privacy Policy explains what data we collect, how we use it, how we protect it, and what rights you have under Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). If you have any questions about this policy, please contact us at [email protected].

2. Who We Are

Data Controller: Khao Finance
Address: 85 New Petchaburi Road, Bang Kapi, Huai Khwang, Bangkok 10310, Thailand
Email: [email protected]
Phone: +66 2 637 9185

3. Data We Collect

We collect personal information in the following ways:

• Contact form submissions: Name, email address, phone number (optional), and message content when you enquire about or enrol in a program.
• Enrollment records: Name, email address, payment confirmation reference, and program enrollment status.
• Website usage data: IP address, browser type, pages visited, and session duration, collected via analytics cookies if you consent to their use.
• Communications: The content of emails or messages you send to us directly.

We do not collect financial account numbers, government identification numbers, or biometric data.

4. Legal Basis for Processing

• Consent: For marketing communications and optional analytics cookies, where you have given explicit consent.
• Contractual necessity: For processing enrollment and communicating with you about programs you have enrolled in.
• Legitimate interests: For responding to enquiries, improving our programs, and maintaining the security of our systems.
• Legal obligation: Where processing is required by Thai law.

5. How We Use Your Data

• To respond to enquiries and provide information about our programs
• To process and manage program enrollment and payment
• To communicate with you during your enrolled program
• To schedule optional mentor conversations (Program 3 only)
• To improve the quality and relevance of our programs based on learner feedback
• To send program update notifications to enrolled learners when course material is revised
• To maintain records required for business and legal purposes

6. Data Retention

• Enquiry data: Retained for 12 months from last contact if no enrollment followed.
• Enrollment records: Retained for 5 years after program completion for accounting and compliance purposes.
• Marketing consents: Retained until withdrawn, plus 1 year for audit purposes.
• Analytics data: Aggregated and anonymised after 26 months.

7. Data Sharing

We do not sell personal data. We may share data with:

• Payment processors: To verify payment for program enrollment (name and transaction reference only).
• Email service providers: To send program-related communications.
• Analytics providers: Aggregated, anonymised data only, where analytics cookies are consented to.
• Legal authorities: Where required by Thai law or court order.

All third-party processors are required to handle data securely and only as instructed by us.

8. Data Protection Measures

• All data transmission is encrypted using TLS/HTTPS.
• Access to personal data is restricted to Khao Finance staff on a need-to-know basis.
• We conduct periodic reviews of our data handling practices.
• In the event of a data breach affecting your personal information, we will notify you and the relevant Thai authorities as required under the PDPA.

9. Cookies

Our website uses cookies to support functionality and, where you consent, to understand how the site is used. For full details, please read our Cookie Policy.

10. Your Rights Under PDPA

Under Thailand's PDPA, you have the following rights:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: You may request deletion of your data, subject to legal retention obligations.
• Right to data portability: Where technically feasible, you may request your data in a portable format.
• Right to object: You may object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
• Right to lodge a complaint: You may file a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies before providing personal information.

12. Children's Privacy

Our programs are designed for adults aged 40 and older. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided data to us, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy as our practices or Thai law changes. Updates will be posted on this page with a revised "Last Updated" date. We will notify enrolled learners of material changes by email.

14. Contact

For privacy-related enquiries or to exercise your rights:
Email: [email protected]
Phone: +66 2 637 9185
Address: 85 New Petchaburi Road, Bang Kapi, Huai Khwang, Bangkok 10310, Thailand