Privacy Policy

1. Introduction

Estavia (“we”, “us”, “our”) is an educational organisation based at 94 Chang Khlan Road, Chang Khlan, Chiang Mai 50100, Thailand. We are committed to handling personal data responsibly and in accordance with applicable Thai data protection law, including the Personal Data Protection Act B.E. 2562 (PDPA).

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights available to you in relation to your data. It applies to all individuals who interact with our website and attend our educational programmes.

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, telephone number (where provided)
• Enquiry content: messages submitted through our contact form
• Programme booking information: attendance details and payment records
• Website usage data: via cookies and analytics tools (see Section 5)

We do not collect personal documents, financial records, or sensitive family information from programme participants. All workshop exercises use example content only.

3. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA:

• Consent: where you have provided it, for example via our website contact form or cookie acceptance
• Contractual necessity: to deliver a programme you have booked and paid for
• Legitimate interests: to improve our website, respond to enquiries, and manage our operations
• Legal obligation: to comply with applicable Thai law

4. How We Use Your Data

• Responding to enquiries submitted through our contact form
• Confirming and managing programme bookings
• Sending information about upcoming sessions where you have requested this
• Improving our website and educational content
• Complying with legal obligations

We do not sell personal data to third parties or share it for marketing purposes without explicit consent.

5. Cookies and Analytics

Our website uses cookies to understand how visitors use it. We may use analytics tools such as Google Analytics to collect anonymised usage data. You can manage cookie preferences through our Cookie Consent tool or review full details in our Cookie Policy.

Essential cookies are required for the website to function and cannot be disabled. All other cookie categories are optional and only activated with your consent.

6. Data Retention

We retain contact enquiry data for up to 24 months unless a booking is made, in which case booking records are retained for 5 years to meet administrative and legal requirements. Website analytics data is retained in anonymised form. You may request deletion at any time (see Section 8).

7. Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Access to personal data is restricted to staff with a need to handle it. Our website uses HTTPS encryption. We review security practices regularly.

8. Your Rights

Under the PDPA, you have the following rights in relation to your personal data:

• Right to access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data (subject to legal retention requirements)
• Right to restrict processing: request that we limit how we use your data
• Right to data portability: request your data in a structured, commonly used format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: withdraw consent at any time without affecting prior lawful processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before submitting personal data.

10. Children's Privacy

Estavia's programmes are designed for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact [email protected] and we will remove it promptly.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted at the top of this page with a revised date. Continued use of our website following an update indicates acceptance of the revised policy.

12. Contact

For privacy-related enquiries:

• Email: [email protected]
• Address: Estavia, 94 Chang Khlan Road, Chang Khlan, Chiang Mai 50100, Thailand