Privacy Policy

1. Data We Collect

We collect personal information that is necessary to deliver our financial education services or to respond to your enquiries. This may include:

• Full name and contact details (email address, phone number)
• Financial information you share during sessions (income, expenses, assets, liabilities)
• Session notes and documents created during our engagements
• Technical data from website visits (IP address, browser type, pages visited — via cookies)
• Communications sent via our contact form or email

We collect this information when you submit our contact form, book or attend a session, or correspond with us directly.

2. How We Use Your Data

We use personal data for the following purposes:

• To deliver the financial education sessions and materials you have engaged us for
• To respond to your enquiries and communicate about your engagement
• To prepare session documents, financial snapshots, spending frameworks, and decade plan materials
• To process payments and maintain financial records as required by law
• To improve the quality of our services through internal review
• To send service-related communications (session confirmations, document delivery)

Legal basis: We process personal data on the basis of contractual necessity (to deliver services you have requested), consent (for website analytics cookies), and legitimate interest (to improve our services and respond to enquiries).

3. Data Retention

We retain client session data and correspondence for a period of five years following the conclusion of an engagement, or as required by Thai tax and financial record-keeping law. Website analytics data is retained for up to 26 months. Contact enquiry data from individuals who do not proceed to engagement is deleted within 12 months. You may request earlier deletion — see Your Rights below.

4. Data Protection Measures

We take reasonable and appropriate steps to protect personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encrypted storage of client documents and session materials
• Access to client information restricted to the named adviser and business administration
• Secure email communications for document delivery
• Regular review of data handling practices

In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and the relevant authority within 72 hours of becoming aware of the breach, as required under PDPA.

5. Sharing of Personal Data

We do not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. We may share data in the following limited circumstances:

• Service providers: We use limited third-party tools (cloud storage, email platforms) that may process data on our behalf under data processing agreements.
• Legal compliance: We may disclose data where required to do so by Thai law, court order, or government authority.
• Website analytics: If you consent to analytics cookies, anonymised browsing data may be processed by Google Analytics.

6. Cookies

Our website uses cookies to understand how visitors use the site and to improve your experience. You can control cookie preferences at any time through our Cookie Policy page. Essential cookies required for basic site function cannot be disabled.

7. Your Rights Under PDPA

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to data portability: You may request your data in a machine-readable format where technically feasible.
• Right to object: You may object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
• Right to lodge a complaint: You have the right to lodge a complaint with Thailand's Office of the Personal Data Protection Committee (PDPC).

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

9. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services following any update constitutes acceptance of the revised policy.

11. Contact

For any questions, data requests, or concerns regarding this Privacy Policy, please contact us at:

• Stonemarch
• 156 Surawong Road, Si Phraya, Bang Rak, Bangkok 10500, Thailand
• Email: [email protected]
• Phone: +66 2 234 5172