Privacy Policy
At Orn Charoen, we handle your personal information with the same care and respect we bring to every teaching session. This policy explains clearly what data we collect, how we use it, and what rights you have over your own information.
1. Introduction
Orn Charoen ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy applies to all services offered through our workshops, programmes, and this website.
We collect and process personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable international standards.
If you have any questions about this policy, please reach out to us at [email protected].
2. Data We Collect
We collect only the information necessary to provide our educational services and communicate with you effectively:
Information You Provide Directly
- Full name
- Email address
- Phone number (if provided)
- Enquiry or message content submitted through our contact form
- Workshop enrolment details
Information Collected Automatically
- Browser type and version
- Pages visited and time spent on site
- Referring website or source
- IP address (anonymised where possible)
- Device type and screen size
Legal Basis for Processing
- Consent — for marketing communications and analytics cookies
- Legitimate Interest — for service delivery and improving our educational offerings
- Contractual Necessity — for processing workshop enrolments
Retention Periods: Enquiry data: 2 years | Enrolment records: 5 years | Analytics data: 14 months
3. How We Use Your Data
Your personal information helps us provide a thoughtful, well-organised educational experience:
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
4. Data Protection Measures
We take reasonable and appropriate steps to keep your information secure:
Secure Transmission
All data exchanged through our website is transmitted over HTTPS encrypted connections.
Access Controls
Only authorised staff with a genuine need may access personal data, and they are trained in data handling.
Secure Storage
Records are stored on systems with appropriate access restrictions and regular security reviews.
Breach Notification
In the unlikely event of a data breach, we will notify affected individuals and relevant authorities promptly.
6. Your Rights
Under Thailand's Personal Data Protection Act (PDPA), you have the following rights regarding your personal data:
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
7. Third-Party Links
Our website may include links to external resources, such as financial news sites, regulatory bodies, or educational references. These are provided for your convenience and information.
We have no control over the content or privacy practices of those external sites and encourage you to read their privacy policies before sharing any personal information with them.
8. Children's Privacy
Our programmes and services are designed for adults aged 40 and above. We do not knowingly collect personal information from anyone under the age of 18.
If you believe we have inadvertently received data from a minor, please contact us promptly at [email protected] and we will delete it without delay.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make changes, we will update the "Last Updated" date at the top of this page.
For significant changes, we will notify registered participants by email. Continuing to use our services after any update constitutes acceptance of the revised policy.
10. Contact Us
If you have questions about this policy, wish to exercise your rights, or have any concerns about how your data is handled, please reach out: