Privacy Policy

1. Introduction

Stipendia ("we", "us", "our") is committed to handling personal information responsibly and transparently. This Privacy Policy explains what data we collect, why we collect it, how it is used and how it is protected when you interact with our website at stipendia.pro or when you attend one of our sessions at our Bangkok office.

This policy applies to all visitors to our website and to all individuals who contact us or engage our services. If you have any questions about how we handle personal data, please contact us at [email protected].

Stipendia operates in Thailand and processes personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) (PDPA), Thailand's primary data protection legislation.

2. What Personal Data We Collect

Data You Provide Directly

• Full name and preferred name
• Email address
• Phone number (when provided voluntarily)
• Message content submitted via our enquiry form
• Session booking details and attendance records

Data Collected Automatically

• Browser type and device information
• Pages visited and time on site
• IP address (anonymised where possible)
• Cookie preference settings stored in your browser

Documents

If you bring personal pension or retirement documents to a session, those documents are used only within the session itself. We do not retain copies, photographs or digital scans of client documents unless you have separately and explicitly requested this as part of a records set-up engagement, in which case the data handling terms are discussed with you in advance.

3. Legal Basis for Processing

Under the PDPA, we process personal data on the following legal grounds:

• Consent: For marketing communications and non-essential cookies, where you have opted in.
• Contract: To fulfil a booking or service engagement you have entered into with us.
• Legitimate Interest: For basic website operation, responding to enquiries and maintaining session records.
• Legal Obligation: Where Thai law requires us to retain certain records.

4. How We Use Personal Data

• To respond to your enquiries and arrange sessions
• To send booking confirmations and session reminders
• To maintain an attendance record for our services
• To send occasional educational updates or session announcements (only where you have consented)
• To improve our website and understand how visitors use it
• To comply with legal obligations under Thai law

We do not use personal data for automated decision-making. We do not sell, rent or trade personal data to any third party.

5. Data Retention

• Enquiry form submissions: Retained for up to 12 months, then deleted unless a service engagement follows.
• Session attendance records: Retained for up to 3 years for operational and safety purposes.
• Accounting and payment records: Retained for 7 years in accordance with Thai commercial law.
• Marketing consent records: Retained until consent is withdrawn.

6. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. These include:

• Password-protected systems for contact records
• SSL encryption on our website
• Access limited to authorised team members only
• Regular review of who has access to stored data

In the event of a data breach that poses a risk to individuals, we will notify the relevant supervisory authority and affected individuals in accordance with PDPA requirements.

7. Cookies

Our website uses cookies to operate correctly and, where consented, to understand site usage. Details of the cookies we use and how to manage your preferences are set out in our Cookie Policy.

8. Third-Party Services

We may use the following third-party services, each of which processes data according to their own privacy policies:

• Google Analytics: Website traffic analysis (anonymised). You may opt out via cookie preferences.
• Google Maps: Location display on our website. No personal data from our site is shared with Google Maps.
• Email service providers: Used solely to send session confirmations and communications you have requested.

We do not use advertising networks or social media tracking pixels.

9. Your Rights Under Thai PDPA

You have the following rights in relation to personal data we hold about you:

• Right to access: Request a copy of the personal data we hold.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Ask us to delete data in certain circumstances.
• Right to restrict processing: Ask us to limit how we use data in certain circumstances.
• Right to data portability: Request data in a structured, machine-readable format where applicable.
• Right to object: Object to processing carried out on the basis of legitimate interest.
• Right to withdraw consent: Withdraw any consent previously given at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe we have not handled your data correctly, you may also contact the Personal Data Protection Committee (PDPC) of Thailand.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We recommend reading the privacy policies of any third-party sites you visit.

11. Children

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us so we can delete it promptly.

12. Changes to This Policy

We may update this policy periodically. When we do, the "Last Updated" date at the top of this page will change. Continued use of our website after a change constitutes acceptance of the updated policy. For significant changes, we will make a clear notice available on our website.

13. Contact for Privacy Matters

Data Controller: Stipendia
Address: 9/3 Phaya Thai Road, Ratchathewi, Bangkok 10400, Thailand
Email: [email protected]
Phone: +66 92 614 8307