Privacy Policy

1. Introduction

Baan Panya ("we", "us", "our") is committed to protecting the personal data of everyone who interacts with our organisation. This Privacy Policy explains what information we collect, how we use it, how we protect it, and what rights you have in relation to it.

This policy applies to data collected through our website at https://baanpanya.blog, through our enquiry and enrolment processes, and in the course of delivering our financial education programs in Chiang Mai, Thailand.

We process personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA).

2. Data We Collect

We collect the following categories of personal data:

• Identification data: full name, as provided when enquiring or enrolling
• Contact data: email address, telephone number, and postal address where provided
• Program and participation data: which program you are enrolled in, attendance records, and materials distributed
• Website usage data: IP address, browser type, pages visited, and time spent on site (collected via analytics cookies, where consented)
• Communication records: the content of emails or messages you send us

We do not collect financial account details, identification document numbers, or health information.

3. How We Collect Data

Personal data is collected when you:

• Submit an enquiry via our website contact form
• Call or email us directly
• Complete an enrolment or registration process
• Attend a program session
• Browse our website (limited technical data, subject to cookie preferences)

4. Legal Basis for Processing

We process your personal data under the following legal bases as defined by the PDPA:

• Consent: for marketing communications and non-essential cookies
• Contractual necessity: to administer your enrolment and deliver the program you have enrolled in
• Legitimate interests: to respond to your enquiries, improve our programs, and maintain programme administration records
• Legal compliance: where required by applicable Thai law

5. How We Use Your Data

• To respond to your enquiries and provide information about our programs
• To process enrolment and manage your participation in a program
• To communicate with you about your program, schedule, and materials
• To send post-program advisory review communications (Golden Years participants)
• To improve our curriculum and service quality through anonymised feedback analysis
• To comply with applicable legal obligations

We do not use your data for automated decision-making or profiling.

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share limited data with:

• Email service providers: for delivering program-related communications
• Analytics providers: where you have consented to analytics cookies (aggregated, anonymised data only)
• Legal authorities: where required by Thai law or court order

All third-party processors we use are required to handle data in a manner consistent with PDPA requirements.

7. Data Retention

We retain your personal data for the following periods:

• Enquiry and pre-enrolment data: 12 months from last contact, unless you proceed to enrol
• Enrolment and programme records: 5 years from the completion of the programme
• Financial transaction records: 7 years, as required under Thai accounting regulations
• Website analytics data: 26 months

After these periods, data is securely deleted or anonymised.

8. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include:

• Secure (HTTPS) website connections
• Password-protected systems with restricted staff access
• Regular review of data access permissions
• Physical security of premises where paper records are held

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals within the timeframes required by the PDPA.

9. Cookies

Our website uses cookies. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Your Rights Under the PDPA

You have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right of rectification: to request correction of inaccurate data
• Right of erasure: to request deletion of your data in certain circumstances
• Right to data portability: to receive your data in a structured, commonly used format
• Right to object: to object to processing based on legitimate interests
• Right to withdraw consent: where processing is based on consent, to withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe we have handled your data incorrectly.

11. Children's Privacy

Our programs are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that we have done so inadvertently, we will delete that data promptly.

12. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via our website. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our website or services after any revision constitutes acceptance of the updated policy.

14. Contact

For any questions or requests relating to this Privacy Policy or the handling of your personal data:

• Email: [email protected]
• Telephone: +66 53 217 493
• Post: Baan Panya, 23 Nimmanhemin Road, Soi 9, Suthep, Mueang Chiang Mai, Chiang Mai 50200, Thailand