Privacy Policy
At Sakda Thong, your privacy matters to us as much as your financial wellbeing. We handle personal information with the same care and consideration that we bring to our teaching — transparently, respectfully, and always with your interests in mind.
This policy explains what information we collect, how we use it, and the rights you hold over your own data. It applies to all interactions with our website and educational programmes.
1. Information We Collect
We collect only the information needed to provide our financial education services and respond to enquiries. This falls into two main categories.
Information you give us directly
- Full name and preferred contact name
- Email address
- Telephone number (optional)
- Message or enquiry content submitted via our contact form
- Programme registration details when you enrol
Information collected automatically
- Browser type and version
- Pages visited and time spent on site
- Referring website or search terms
- Approximate geographic location (country / city level)
- Cookie preferences and consent status
2. How We Use Your Data
Your information serves specific, practical purposes. We do not use it for anything beyond what is described here.
- Responding to enquiries — to get back to you when you contact us through our website
- Programme delivery — to confirm enrolment, schedule sessions, and share course materials
- Administrative communications — reminders, rescheduling notices, and follow-up after sessions
- Website improvement — aggregated analytics help us understand which content is useful and where we can do better
- Legal compliance — retaining records as required by Thai law
We will never sell your data, rent it to third parties for marketing, or use it to send unsolicited promotional messages.
3. Legal Basis for Processing
Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), we rely on the following lawful bases:
Consent
When you submit our contact form or accept cookies, you consent to the relevant processing. You may withdraw consent at any time.
Contract Performance
Processing your name and contact details is necessary to deliver the programme you have enrolled in.
Legitimate Interest
Basic website analytics help us maintain a useful, well-functioning site. We balance this against your privacy rights.
Legal Obligation
Certain business records must be kept to comply with Thai tax and accounting requirements.
4. Sharing & Disclosure
We share personal data only when genuinely necessary and always within appropriate safeguards.
- Service providers — hosting, email delivery, and payment processing partners who act on our instructions and are bound by confidentiality agreements
- Analytics platforms — aggregated, anonymised usage data may be processed by tools such as Google Analytics (if analytics cookies are accepted)
- Legal authorities — if required by Thai law or court order, we may be obliged to disclose certain information
We do not transfer personal data outside Thailand unless the destination country provides an adequate level of protection under the PDPA.
5. How We Protect Your Data
We take reasonable technical and organisational measures to keep your information safe.
- Encrypted connections (HTTPS / TLS) for all data in transit
- Access to personal data limited to staff with a genuine need
- Stored data held on servers with access controls and regular security reviews
- Paper records (where held) kept in locked storage
- In the event of a data breach, affected individuals will be notified within 72 hours as required by the PDPA
7. Retention Periods
We keep personal data only for as long as it is needed for the purpose it was collected.
| Data Type | Retention Period |
|---|---|
| Enquiry form submissions | 2 years from date of submission |
| Programme enrolment records | 5 years after programme completion |
| Payment and billing records | 7 years (Thai accounting law) |
| Analytics data (anonymised) | Up to 26 months (platform default) |
| Cookie consent records | 12 months from consent date |
8. Your Rights
Under the PDPA and applicable Thai law, you have the following rights regarding your personal data.
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete data.
Right to Erasure
Request deletion of your data where we no longer have a lawful basis to retain it.
Right to Restriction
Ask us to limit processing while a dispute or review is underway.
Right to Portability
Receive your data in a structured, machine-readable format where technically feasible.
Right to Object
Object to processing based on legitimate interests.
How to exercise your rights: Send a written request to [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).
9. Third-Party Links
Our website may include links to external resources or partner organisations. Once you leave our site, this privacy policy no longer applies. We encourage you to review the privacy notices of any external websites you visit. We are not responsible for the data practices of third-party sites.
10. Children's Privacy
Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data through our site, please contact us at [email protected] and we will remove it promptly.
11. Policy Updates
We may update this policy from time to time to reflect changes in our practices or in applicable law. When we do, the revised version will be posted on this page with an updated date at the top.
If the changes are significant, we will also notify enrolled participants by email. Continued use of our website after an update constitutes acceptance of the revised terms.
12. Contact Us
If you have questions about this policy or wish to exercise any of your rights, please reach out. We are happy to help.
Sakda Thong — Data Controller