Privacy Policy

1. Introduction

Kithwell ("we", "us", "our") is committed to handling personal data with care and transparency. This Privacy Policy explains what personal data we collect, why we collect it, how we use it and the choices you have as a data subject. It applies to all services offered by Kithwell, including our website at kithwell.club and our in-person and remote facilitation services.

Kithwell is based at 205 Ekkamai Road, Watthana, Bangkok 10110, Thailand. Our services are subject to the Personal Data Protection Act B.E. 2562 (2019) of Thailand (PDPA). If you have any questions about this policy, please contact us at [email protected].

2. Personal Data We Collect

We collect only the personal data that is necessary for the purposes described in this policy. This includes:

• Contact information: name, email address and telephone number, collected when you submit an enquiry form or contact us directly.
• Session-related information: notes made by facilitators during facilitation sessions, stored securely and used solely to provide continuity of service.
• Website usage data: analytics information such as page visits and browser type, collected through cookies where you have given consent.

Legal basis: We process personal data on the basis of your consent (for cookies and marketing), legitimate interest (for service delivery and enquiry responses) and, where a service agreement exists, the performance of a contract.

Retention: Contact information is retained for up to 24 months from last contact. Session notes are retained for up to 12 months from the end of a service engagement, after which they are securely deleted.

3. How We Use Personal Data

We use personal data to:

• Respond to enquiries and arrange sessions or workshops
• Provide and manage our facilitation and education services
• Send service-related communications (confirmations, reminders)
• Improve the content and usability of our website (via analytics)
• Comply with our legal obligations under Thai law

We do not sell personal data to third parties or use it for unsolicited marketing purposes.

4. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data from unauthorised access, disclosure or loss. These include:

• Encrypted storage of digital records
• Access limited to authorised staff only
• Secure deletion of data once retention periods are reached
• Periodic review of data handling practices

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant authority and affected individuals as required by law.

5. Cookies

Our website uses cookies to understand how visitors use the site and to remember preferences. We use essential cookies (required for the site to function), analytics cookies (to understand usage patterns) and preference cookies (to remember your settings). Marketing cookies may be used where you have given consent.

You can manage your cookie preferences at any time through our Cookie Policy page.

6. Third-Party Services and Links

We may use third-party services to support our website and operations (such as analytics tools). These providers process data only on our instruction and are subject to appropriate data processing agreements.

Our website may contain links to external sites. Kithwell is not responsible for the privacy practices of those sites and encourages you to read their policies before providing personal data.

7. Children's Privacy

Kithwell's services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18 without verifiable parental or guardian consent. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

8. Your Rights

Under the Thai PDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Withdraw consent at any time (without affecting prior processing)
• Object to processing based on legitimate interest
• Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, please contact us at [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you directly. Continued use of our services after changes are published constitutes acceptance of the updated policy.