Privacy Policy

1. Introduction

Kinford ("we", "us", "our"), located at 134 Huay Kaew Road, Su Thep, Chiang Mai 50200, Thailand, is committed to protecting the personal data of individuals who interact with our programmes and website. This policy explains what data we collect, why we collect it, how we use it, and what rights you have under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

If you have any questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect personal data only when it is necessary for the purpose stated at the time of collection. The types of data we may collect include:

• Name and contact details (email address, phone number) provided when enquiring or registering for a programme
• Attendance records for participants enrolled in group sessions
• Anonymous feedback submitted after sessions (not linked to your identity)
• Technical data collected automatically when you visit our website, such as browser type, pages viewed, and time on site (via cookies — see our Cookie Policy)

We do not collect sensitive personal data such as health information, financial records, or identification documents unless specifically required for a programme and with your explicit consent.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the PDPA:

• Consent: when you submit an enquiry form or register for a programme, you consent to us using your data to respond and administer your participation
• Legitimate interests: to improve our programmes based on aggregated, non-identifiable feedback
• Contractual necessity: to fulfil the obligations associated with a programme purchase, such as sending confirmation details

4. How We Use Your Data

• To respond to enquiries and provide information about our programmes
• To register and communicate with participants before, during, and after a session series or membership year
• To process payments where applicable
• To send occasional updates about upcoming programmes — only where you have indicated interest and have not opted out
• To maintain attendance records for programme administration
• To improve our programmes using anonymous, aggregated feedback data

We do not use your personal data for automated decision-making or profiling.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data in the following limited circumstances:

• With service providers who assist with our website or communications (e.g. email platform), under written data processing agreements
• Where required by Thai law or a lawful order from a government authority

All third-party processors are bound by confidentiality obligations and may only process data for the purposes we specify.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described above:

• Enquiry and registration data: up to 2 years from last contact
• Programme attendance records: up to 5 years for administrative purposes
• Website analytics data: as configured in our analytics tool (typically 14 months)

After these periods, data is securely deleted or anonymised.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include access controls limiting who can view participant data, secure transmission of data via HTTPS, and annual review of data handling practices.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and affected individuals in accordance with PDPA requirements.

8. Cookies

Our website uses cookies to function correctly and to understand how it is used. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies cannot be disabled as they are required for the website to operate.

9. Your Rights Under the PDPA

As a data subject under Thailand's PDPA B.E. 2562, you have the following rights:

• Right to access: to request a copy of the personal data we hold about you
• Right to rectification: to ask us to correct inaccurate or incomplete data
• Right to erasure: to request deletion of your data in certain circumstances
• Right to restrict processing: to ask us to limit how we use your data
• Right to data portability: to receive your data in a structured, machine-readable format where technically feasible
• Right to object: to object to processing based on legitimate interests
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint: with the Personal Data Protection Committee of Thailand or other relevant supervisory authority

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may include links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

11. Children's Privacy

Our website and online services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. The current version will always be available on this page with the date of last update noted at the top. Continued use of our website or services after an update constitutes acceptance of the revised policy.

13. Contact

For any privacy-related questions or to exercise your rights, please contact:

Kinford
134 Huay Kaew Road, Su Thep, Chiang Mai 50200, Thailand
Email: [email protected]
Phone: +66 53 274 619