Privacy Policy

1. Who We Are

The data controller for information collected through this website and through our programmes is:

2. What Information We Collect

We collect the following categories of personal information:

• Contact information — name, email address, and phone number, provided when you submit our enquiry form or contact us directly.
• Enquiry content — the message text you submit through our website form.
• Programme records — if you enrol in a programme, we maintain records of attendance and, where relevant, feedback you provide during or after sessions.
• Website usage data — anonymised data collected via cookies about how visitors use our site (pages visited, session duration). This is collected only if you have consented. See Section 6 for details.

We do not collect financial account details, payment card numbers, or sensitive personal categories such as health data.

3. How We Use Your Information

We use the information we hold for the following purposes:

• Responding to your enquiry and discussing programme options with you
• Managing your enrolment and participation in a programme
• Sending practical information about your sessions (dates, materials, changes)
• Improving our programmes based on participant feedback
• Complying with applicable Thai law and regulatory requirements

We do not sell your information to third parties. We do not use your information for automated decision-making or profiling.

Legal basis: Processing is based on your consent (for website enquiry forms and cookies) and on the performance of a service arrangement (for enrolled participants).

4. How Long We Keep Your Information

• Enquiry records — kept for 12 months from the date of the last communication, then deleted unless you have enrolled in a programme.
• Programme records — kept for 3 years after the programme's end date, for administrative and safety reference, then deleted.
• Website analytics data — anonymised aggregate data with no individual retention beyond 26 months.

5. Data Protection Measures

We take the following steps to protect personal information:

• Website forms use HTTPS encryption for data in transit
• Paper programme records are stored in a locked cabinet, accessible only to Anong Wealth staff
• Digital records are stored on password-protected devices
• Staff are instructed on the importance of participant confidentiality

If we become aware of a personal data breach that is likely to result in harm to affected individuals, we will take prompt steps to address it and will notify affected individuals as required under applicable law.

6. Cookies

Our website uses cookies. These are small text files placed on your device. You can manage your cookie preferences using the banner shown when you first visit our site, or through our Cookie Policy page. We use:

• Essential cookies — necessary for the site to function. These cannot be declined.
• Analytics cookies — help us understand how visitors use the site. Require your consent.
• Preference cookies — remember your settings across visits. Require your consent.

7. Third Parties

We may share limited information with the following categories of third party, only as necessary:

• Website hosting providers — who process data on our behalf under confidentiality obligations.
• Analytics services — such as Google Analytics, if you have consented to analytics cookies.

We do not share personal information with advertisers or marketing companies. External links on our website lead to third-party sites with their own privacy practices, for which we are not responsible.

8. Your Rights

Under Thai data protection law and, where applicable, international frameworks, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — request that we delete your personal information, subject to legal retention obligations.
• Withdraw consent — where we process based on your consent, you may withdraw it at any time. This does not affect processing already carried out.
• Object — object to certain types of processing, including direct marketing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Children

Our programmes and website are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18.

10. Policy Updates

We may update this policy from time to time. Where changes are material, we will post a notice on our website. The date at the top of this page shows when this version was last updated. Continued use of our services after a change constitutes acceptance of the revised policy.

11. Contact for Privacy Enquiries