Privacy Policy

1. Who We Are

maleeinsad is the data controller for personal information collected through our website and programmes. Our registered address is 108 Rama IV Road, Thung Maha Mek, Sathon, Bangkok 10120, Thailand. For data-related enquiries, contact us at [email protected].

2. What Personal Data We Collect

Data You Provide Directly

• Contact enquiries: name, email address, telephone number, and message content when you submit our contact form
• Enrolment: name, contact details, and where relevant, household or financial context you choose to share during the admissions conversation
• Course participation: personal financial information you share during consultation sessions or in worksheets, which is treated as confidential

Data Collected Automatically

• IP address and approximate location derived from it
• Browser type, device type, and operating system
• Pages visited and time spent, via analytics cookies (if consented)
• Referral source (how you arrived at our website)

3. How and Why We Use Your Data

• To respond to enquiries — when you contact us, we use your details to reply. Legal basis: legitimate interest.
• To administer enrolment — managing your place in a programme, sending course materials, and scheduling sessions. Legal basis: contract performance.
• To deliver consultation sessions — information you share with practitioners is used solely within the confidential session context. Legal basis: contract performance and explicit consent.
• To improve our website — using aggregated, anonymised analytics data. Legal basis: legitimate interest.
• To send course updates or relevant information — only where you have given consent or are an existing learner with a relevant interest.

We do not use your personal data for automated decision-making or profiling.

4. Data Sharing

We do not sell personal data. We do not share learner financial information with third parties. We may share limited contact data with:

• IT and hosting providers who process data on our behalf under data processing agreements
• Analytics providers (anonymised data only, where analytics cookies are accepted)
• Legal or regulatory authorities where required by Thai law

External practitioners (attorneys, tax consultants) who work with learners in sessions are bound by their own professional confidentiality obligations in addition to our internal policy.

5. Data Retention

• Contact enquiries not leading to enrolment: deleted after 12 months
• Enrolment and course records: retained for 5 years after programme completion, in line with standard business record-keeping requirements under Thai law
• Consultation session notes and worksheets: retained for 2 years after the programme's follow-up period ends, then securely deleted
• Analytics data: retained in aggregated form for up to 26 months

6. Cookies

Our website uses essential cookies required for basic site functionality, and optional analytics cookies to help us understand how visitors use the site. You may manage your cookie preferences at any time via our Cookie Policy page.

7. Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or loss. These include encrypted data transmission (HTTPS), access controls limiting who can view personal data, and regular review of our data handling practices. In the event of a data breach that is likely to affect your rights, we will notify you and the relevant supervisory authority within the timeframe required by Thai PDPA.

8. Your Rights Under Thai PDPA

As a data subject under the Personal Data Protection Act, you have the right to:

• Access — request a copy of personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data where no overriding legal basis applies
• Restriction — ask us to limit processing while a dispute is resolved
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdrawal of consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.

9. Links to External Websites

Our site may contain links to external resources. We are not responsible for the privacy practices of those sites and recommend you review their policies independently.

10. Children's Privacy

Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that data from a minor has been submitted, we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website after changes are posted constitutes acceptance of the revised policy.

12. Contact for Privacy Matters

For questions or requests related to this policy or your personal data, please contact: