Privacy Policy

1. Introduction

Fernglen ("we", "us", "our") is committed to handling personal information with care. This Privacy Policy explains what data we collect, how we use it, and what rights you have in relation to it. It applies to all visitors and participants who interact with our services, website, and programs based at 63/1 Huay Kaew Road, Suthep, Mueang Chiang Mai, Chiang Mai 50200, Thailand.

This policy is written to comply with Thailand's Personal Data Protection Act B.E. 2562 (PDPA 2019) and other applicable data protection obligations. If you have questions, contact us at [email protected].

2. Data We Collect

We collect personal data in the following circumstances:

• Contact form submissions: name, email address, phone number (optional), and any details included in your message.
• Program enquiries and enrollment: name, contact details, and relevant context about your financial situation as shared during intake conversations.
• Website analytics: anonymized usage data such as pages visited, browser type, and approximate location (via IP address).
• Cookie preferences: consent choices stored locally in your browser.

We do not collect sensitive financial account information, identification documents, or payment data through our website.

3. Legal Basis for Processing

We process personal data on the following grounds:

• Consent: where you have provided explicit agreement (e.g., submitting a contact form or accepting analytics cookies).
• Legitimate interests: for internal administration, quality improvement, and responding to enquiries.
• Contractual necessity: where processing is required to deliver a program you have engaged us for.

4. How We Use Your Data

• To respond to your enquiry and schedule sessions
• To deliver and manage educational programs
• To communicate relevant updates relating to your program
• To improve our services based on feedback and usage patterns
• To comply with applicable legal obligations

We do not use your personal data for marketing purposes without your explicit consent. We do not sell, rent, or share personal data with third parties for their own commercial purposes.

5. Data Retention

We retain personal data for as long as is necessary for the purpose it was collected. In practice:

• Contact form submissions: up to 12 months from the date of submission
• Program participant records: up to 3 years following the conclusion of the program
• Analytics data: retained in aggregate form; not linked to identifiable individuals

After the applicable retention period, data is securely deleted.

6. Third-Party Services

We may use the following third-party services in the course of operating our website and programs:

• Google Analytics: anonymized website usage analysis (if analytics cookies are accepted)
• Google Maps: embedded location map on our website (no personal data transmitted)
• Email service providers: for sending responses to enquiries

These third parties operate under their own privacy policies. We select providers that maintain appropriate data protection standards.

7. Cookies

We use cookies to understand how visitors engage with our website. Essential cookies are necessary for the site to function. Optional analytics and preference cookies are only activated with your consent. For full details, see our Cookie Policy.

8. Your Rights

Under Thailand's PDPA and applicable laws, you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: request corrections to inaccurate or incomplete data
• Erasure: request deletion of your data where we have no overriding legal basis to retain it
• Portability: receive your data in a structured, machine-readable format where applicable
• Object: object to processing carried out on the basis of legitimate interests
• Withdraw consent: withdraw any consent previously given, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Data Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure. These include restricted access controls, secure email communication, and regular review of data handling practices. In the event of a data breach that may affect your rights, we will notify you and the relevant supervisory authority as required by law.

10. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, please contact us so we can remove it promptly.

11. External Links

Our website may include links to external sites. We are not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies independently.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last Updated" date at the top of this page. Continued use of our services after a policy change constitutes acceptance of the revised terms.

13. Contact

For privacy-related questions, requests, or concerns:

• Email: [email protected]
• Address: 63/1 Huay Kaew Road, Suthep, Mueang Chiang Mai, Chiang Mai 50200, Thailand
• Phone: +66 53 894 217

Supervisory authority for data protection in Thailand: Office of the Personal Data Protection Committee (PDPC), Ministry of Digital Economy and Society.