Privacy Policy

1. Introduction

Concordo ("we", "us", "our") is committed to protecting the personal information of everyone who uses our website, enquires about our services, or participates in our workshops and resources. This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have in relation to it.

This policy applies to all personal data processed by Concordo in connection with our educational resources and administrative activities. It has been prepared with reference to Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

If you have questions about this policy or how your data is handled, please contact us at [email protected].

2. Data We Collect

We collect only the information necessary to respond to your enquiries, manage bookings, and deliver our resources. This includes:

• Contact information: name, email address, and phone number (if provided) when you submit our contact form or enquire by phone or email.
• Correspondence records: the content of messages you send us, to allow us to respond appropriately.
• Booking information: the resource or workshop you are enquiring about, and any scheduling preferences you communicate.
• Website usage data: anonymised analytics data collected through cookies, including pages visited, session duration, and device type. This data does not identify you individually. See our Cookie Policy for details.

We do not collect sensitive personal data (such as information about health, finances, legal situations, or family circumstances) through our website or contact form. If you choose to share such information in correspondence, we treat it with the highest degree of discretion.

Legal basis: We process contact data on the basis of your consent (when you submit the form) and our legitimate interest in responding to enquiries. Booking-related data is processed as necessary to perform the service you have requested.

Retention: Contact enquiry records are retained for up to 24 months. Booking records are retained for 36 months from the date of the engagement. Analytics data is retained in anonymised form.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to your enquiries and provide information about our resources.
• To confirm bookings and coordinate session logistics.
• To send you information about upcoming sessions or changes that affect a booking you have made.
• To improve our website and resources based on anonymised usage patterns.
• To comply with any applicable legal or regulatory obligations.

We do not use your personal data for direct marketing without your explicit consent. We do not sell, rent, or trade your personal information to third parties.

4. Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers: We use third-party tools for email management and website analytics. These providers process data only on our instructions and are bound by confidentiality obligations.
• Legal requirements: We may disclose data if required to do so by Thai law or a competent authority.

We do not share participant session content, family circumstances, or communication materials with any third party.

5. Data Protection Measures

We take the security of personal data seriously. Our measures include:

• Encrypted transmission of data via HTTPS across our website.
• Access to personal data restricted to authorised Concordo staff only.
• Secure storage of records with access controls and regular review.
• A process for notifying affected individuals and the relevant authority in the event of a data breach, in accordance with PDPA requirements.

6. Cookies

Our website uses cookies to understand how it is used and to improve the experience for visitors. Essential cookies are necessary for the site to function. Analytics and preference cookies are optional and require your consent.

For full details on the cookies we use and how to manage your preferences, see our Cookie Policy.

7. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights in relation to personal data we hold about you:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request that inaccurate data be corrected.
• Right to erasure: Request deletion of your personal data, subject to our legal obligations.
• Right to data portability: Request your data in a portable format.
• Right to object: Object to processing based on legitimate interest.
• Right to withdraw consent: Withdraw consent at any time for processing based on consent.
• Right to lodge a complaint: Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) if you believe your rights have been infringed.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

9. Age Restrictions

Our resources and services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted information to us, please contact us at [email protected] so we can remove it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised date. Continued use of our website after changes constitutes acceptance of the updated policy. For significant changes, we will take reasonable steps to notify you directly.

11. Contact Us

Data Controller: Concordo

46 Charoen Rat Road, Wat Ket, Mueang Chiang Mai, Chiang Mai 50000, Thailand

Privacy enquiries: [email protected]

General enquiries: [email protected]

Phone: +66 88 471 9263