legal · transparency
Privacy Policy
Nakhon Capital Co., Ltd. ("we," "our," or "us") is committed to handling your personal information with care and in keeping with applicable Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA). This Privacy Policy describes what information we collect when you visit our website or engage with our educational programs, how we use it, and the choices available to you.
By using our website or enrolling in a program, you acknowledge that you have read and understood this policy. If you have questions at any point, we welcome you to reach out to us directly.
Contents
1. Information We Collect
We collect information in a few different ways, and only to the extent necessary to serve you well.
Information you provide directly. When you submit an enquiry through our contact form, register for a program, or correspond with us by telephone or email, we may collect your name, email address, telephone number, and any details you choose to share in your message.
Information collected automatically. When you visit our website, certain technical information is collected automatically, including your IP address, browser type, the pages you visit, and the time and date of your visit. This is gathered through standard server logs and, where you have consented, through analytics and tracking technologies described in our Cookie Policy.
Program enrolment information. If you enrol in one of our educational programs, we may collect additional details needed to administer your participation, such as payment records and program completion milestones.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your enquiries and communicate with you about programs or services you have expressed interest in.
- To administer your enrolment in a program and provide the educational materials and support associated with it.
- To process payments and maintain accurate financial records as required by Thai law.
- To improve the quality of our website and educational offerings through aggregated, anonymised analysis.
- To send occasional program updates or educational resources where you have given us permission to do so.
- To comply with our legal obligations under Thai law.
We do not use your information to make automated decisions that significantly affect you, nor do we engage in profiling for commercial purposes beyond what is described above.
3. Legal Basis for Processing
Under the Personal Data Protection Act B.E. 2562, we process your personal data on the following legal grounds:
- Consent — for marketing communications and non-essential cookies, where you have indicated agreement.
- Contractual necessity — where processing is required to fulfil a program enrolment or respond to an explicit enquiry you have made.
- Legal obligation — where Thai law requires us to maintain certain records.
- Legitimate interests — for the purpose of operating a secure and functional website, subject to your interests and rights not overriding ours.
6. Data Retention
We retain your personal information for as long as is necessary for the purposes described in this policy, or as required by Thai law.
- Enquiry records and correspondence are typically retained for up to three years.
- Program enrolment records, including payment documentation, are retained for a minimum of five years in accordance with Thai accounting and tax regulations.
- Website analytics data in anonymised or aggregated form may be retained indefinitely as it does not identify individuals.
When your information is no longer needed, we delete or anonymise it in a secure and responsible manner.
7. Your Rights
Under the PDPA and applicable Thai law, you have the following rights with respect to your personal data:
- Right to access — to request a copy of the personal data we hold about you.
- Right to rectification — to request correction of inaccurate or incomplete information.
- Right to erasure — to request deletion of your personal data where there is no longer a lawful basis for us to hold it.
- Right to restrict processing — to ask us to temporarily limit how we use your data while a concern is being reviewed.
- Right to data portability — to receive your data in a structured, commonly used format where technically feasible.
- Right to withdraw consent — to withdraw any consent you have given, at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Right to lodge a complaint — to raise a concern with the Personal Data Protection Committee of Thailand if you believe your rights have not been respected.
To exercise any of these rights, please contact us using the details below. We will respond within thirty days, and we will not charge a fee for reasonable requests.
8. Security
We take reasonable and appropriate technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include secure server infrastructure, access controls, and regular reviews of our data handling practices.
No transmission of data over the internet can be entirely risk-free. If you believe your information has been compromised in any way, please contact us immediately so we can investigate and respond appropriately.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make meaningful changes, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.
If changes are significant and affect how we use personal data you have already provided, we will make reasonable efforts to notify you directly — for example, by email if you are an enrolled participant.
10. How to Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or would like to speak with someone at Nakhon Capital about how we handle your information, please contact us through any of the following: