Privacy Policy

1. Introduction

Baan Thrift ("we", "us", "our"), located at 74/2 Thapae Road, Chang Khlan, Mueang Chiang Mai, Chiang Mai 50100, Thailand, is committed to protecting the personal data of everyone who contacts us or participates in our educational programs. This policy explains what data we collect, why we collect it, how we handle it, and the rights available to you under Thai data protection law, including the Personal Data Protection Act B.E. 2562 (PDPA).

If you have any questions about how we handle your personal data, please contact us at [email protected].

2. Data We Collect

We collect personal data through our website contact form, direct email, telephone enquiries, and during program registration. The categories of data we may collect include:

• Full name and preferred name
• Email address
• Phone number (optional)
• General information shared about your financial or life circumstances during program sessions
• Payment information (processed securely — we do not retain card details)
• Technical data collected by cookies (see Section 6)

We do not collect sensitive financial information beyond what participants choose to share voluntarily during sessions. Such information is treated as confidential and is never shared with third parties.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries and providing information about our programs
• Registering participants and administering program sessions
• Sending program materials, workbooks, and follow-up reports
• Processing payments for program fees
• Improving our programs based on participant feedback
• Complying with legal obligations under Thai law

We do not use personal data for marketing to third parties, do not sell data, and do not share data with financial institutions, insurance companies, or any commercial partners.

4. Legal Basis for Processing

Under Thailand's PDPA, we process personal data on the following legal bases:

• Consent: For website cookies and non-essential communications
• Contract: To fulfil program registration and delivery obligations
• Legitimate interests: To improve our programs and respond to enquiries
• Legal obligation: Where required by Thai law

5. Data Retention

We retain personal data only for as long as necessary:

• Enquiry records: 12 months from last contact
• Program participant records: 3 years from program completion
• Payment records: 7 years in accordance with Thai accounting requirements
• Cookie data: Per cookie duration (see Cookie Policy)

After retention periods expire, data is securely deleted or anonymised.

6. Cookies

Our website uses cookies to improve your browsing experience. We use essential cookies for basic site functionality, and optional analytics and preference cookies subject to your consent. For full details, please read our Cookie Policy.

7. Data Security

We take reasonable technical and organisational steps to protect personal data from unauthorised access, disclosure, or loss. These include:

• Secure email and messaging practices
• Restricted access to participant records
• No retention of payment card details
• Confidentiality obligations for all staff and educators

In the event of a data breach that is likely to affect your rights or freedoms, we will notify you and the relevant Thai supervisory authority as required under the PDPA.

8. Third-Party Services

We may use limited third-party services to operate our website and business, including:

• Web hosting providers
• Email service providers
• Analytics tools (subject to your cookie consent)

We do not share personal data with financial product providers, insurers, or investment firms under any circumstances.

9. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data where no legitimate basis for retention remains
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time without affecting prior lawful processing
• Right to lodge a complaint: With the Office of the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our programs are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we hold data belonging to a minor, we will delete it promptly.

11. External Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or programs after changes constitutes acceptance of the updated policy.

13. Contact

For all data-related enquiries, please contact:

Baan Thrift
74/2 Thapae Road, Chang Khlan, Mueang Chiang Mai, Chiang Mai 50100, Thailand
Email: [email protected]
Phone: +66 53 819 462