Privacy Policy

1. Introduction

Kinaria takes the privacy of its customers and website visitors seriously. This Privacy Policy describes how we collect, use, store, and protect personal data in connection with our programmes and this website. It applies to all interactions with Kinaria, including enquiries, programme enrolment, and website use.

This policy is written in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). If you have questions about this policy or how your data is handled, contact us at [email protected].

2. Data We Collect

2.1 Information You Provide

When you contact us, make an enquiry, or enrol in a programme, we may collect:

• Full name
• Email address
• Phone number (if provided)
• Message content (if submitted via our contact form)
• Payment details (processed via bank transfer; we do not store card data)

2.2 Information Collected Automatically

When you visit our website, standard server logs may collect your IP address, browser type, and pages visited. If you have accepted analytics cookies, we may collect anonymised usage data via analytics services.

2.3 Legal Basis for Processing

We process personal data on the following legal bases:

• Consent — for marketing communications and optional cookie categories
• Contract performance — for managing enrolments and delivering programmes
• Legitimate interest — for responding to enquiries and improving our services
• Legal obligation — where required by Thai law

2.4 Retention Periods

Enquiry data is retained for 12 months from the date of last contact. Enrolment data is retained for 3 years from the date of the last programme interaction. Financial records are retained for 5 years as required by Thai accounting regulations.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries and providing programme information
• Processing enrolments and managing programme access
• Sending order confirmations and programme-related communications
• Improving our programmes based on feedback
• Complying with legal obligations under Thai law

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling. We do not send unsolicited marketing without your prior consent.

3.1 Third-Party Services

We may use the following third-party services in connection with website operation:

• Website hosting providers (data stored on servers in Thailand or equivalent jurisdictions)
• Email delivery services for programme correspondence
• Analytics tools (only if you have accepted analytics cookies)

Each third party is required to process data only as instructed by Kinaria and in compliance with applicable data protection laws.

4. Data Protection Measures

Kinaria takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These measures include:

• HTTPS encryption on all website pages
• Access to personal data restricted to authorised Kinaria staff
• Physical records (where applicable) stored in locked filing at our Bang Rak office
• Regular review of data held and deletion of data no longer needed

In the event of a data breach that poses a risk to data subjects, we will notify affected individuals and the relevant supervisory authority within the timeframes required by Thai PDPA.

5. Cookies

Our website uses cookies to provide basic functionality and, where you have consented, to collect anonymised analytics data. For full details on the cookies we use, see our Cookie Policy. You can manage your cookie preferences at any time via the Cookie Policy page.

6. Your Rights Under Thailand's PDPA

As a data subject under Thai law, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of data where there is no legal basis for continued processing
• Right to restriction — to request that we limit the processing of your data in certain circumstances
• Right to data portability — to receive your data in a structured, commonly used format
• Right to object — to object to processing based on legitimate interest
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you may lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

7. Third-Party Links

Our website may contain links to external websites. Kinaria is not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policy of any external site before providing personal data.

8. Children's Privacy

Kinaria's programmes and website are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that personal data has been collected from a minor, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated revision date. Continued use of our website or programmes after changes are published constitutes acceptance of the updated policy. We will notify enrolment customers of significant changes by email.

10. Contact

Data Controller: Kinaria Co., Ltd.
252 Charoen Krung Road, Bang Rak, Bangkok 10500, Thailand

For data-related enquiries: [email protected]

General enquiries: [email protected] · +66 2 287 6534