Privacy Policy

1. About Us — Data Controller

Charoen Suk operates as a financial education provider for adults, based at 162 Sathorn Soi 12, Silom, Bangkok 10500, Thailand. For questions relating to this policy, contact us at [email protected] or by phone at +66 2 286 4739.

2. Information We Collect

We collect personal information in the following ways:

• Enquiry and contact forms — name, email address, phone number (optional), and any message you submit through our website.
• Program enrolment — name, contact details, and information necessary to administer your participation in a program.
• Website analytics — non-personal data including page visits, browser type, and general location, collected through cookie-based analytics tools.
• Communications — records of emails or messages exchanged with us in connection with an enquiry or program.

We do not collect sensitive financial records, identification documents, or transaction histories unless you choose to share them directly with an advisor during an individual session.

3. Legal Basis for Processing

We process your personal data on the following legal grounds under the PDPA:

• Consent — when you submit an enquiry form or accept cookie preferences.
• Contract performance — when processing is necessary to deliver a program you have enrolled in.
• Legitimate interests — for internal record keeping and improving our services, where these interests are not overridden by your rights.
• Legal compliance — when processing is necessary to comply with applicable law.

4. How We Use Your Information

• Responding to enquiries submitted through our website or by phone.
• Administering program enrolments, scheduling, and materials delivery.
• Sending program-related communications such as session reminders and follow-up notes.
• Improving our website and educational content based on aggregated analytics data.
• Complying with legal obligations where applicable.

We do not use your information for unsolicited marketing communications. If we send any updates about programs or services, you may opt out at any time by contacting us at [email protected].

5. Data Sharing and Third Parties

We do not sell or trade personal information. We may share data with trusted third parties only in the following limited circumstances:

• Service providers — such as email delivery platforms and website analytics tools, who are bound by data processing agreements.
• Legal requirements — if disclosure is required by law, court order, or competent authority.

Where third-party tools such as Google Analytics are used, data is processed in accordance with those providers' privacy policies. You may opt out of analytics through our Cookie Policy settings.

6. Data Retention

We retain personal information only for as long as necessary:

• Enquiry records — up to 12 months from last contact if no enrolment follows.
• Program participant records — up to 36 months after program completion, for administrative and advisory continuity purposes.
• Analytics data — retained in aggregate form as configured in our analytics platform, typically 26 months.

After the applicable period, data is securely deleted or anonymised.

7. Data Security

We take reasonable technical and organisational measures to protect personal information from unauthorised access, loss, or misuse. These include:

• Encrypted transmission of data via HTTPS on our website.
• Restricted internal access to personal records on a need-to-know basis.
• Secure email communications with program participants.
• Regular review of our data handling procedures.

In the event of a data breach that affects your rights, we will notify you as required under applicable law.

8. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use our pages. You can manage your cookie preferences at any time through our Cookie Policy page. Essential cookies are necessary for the site to function and cannot be disabled.

9. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights:

• Right of access — to request a copy of personal data we hold about you.
• Right to rectification — to request correction of inaccurate data.
• Right to erasure — to request deletion of your data where no lawful basis for retention exists.
• Right to restriction — to request that we limit processing in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format where technically feasible.
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.

10. Third-Party Links

Our website may contain links to external resources, including Thai government financial regulatory bodies and reference materials. We are not responsible for the privacy practices of third-party websites. We encourage you to review their policies before sharing any personal information.

11. Children's Privacy

Our programs and website are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that a minor's data has been submitted, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy periodically. When changes are made, the "Last Updated" date above will be revised. We recommend checking this page occasionally. Continued use of our website or services after any update constitutes acceptance of the revised policy.

13. Contact

For any questions about this Privacy Policy or your personal data:

• Email: [email protected]
• Phone: +66 2 286 4739
• Post: 162 Sathorn Soi 12, Silom, Bangkok 10500, Thailand