Privacy Policy

Phra Capital · Last updated: 28 April 2025

This Privacy Policy explains how Phra Capital ("we", "us", "our") collects, uses, and protects personal information in connection with our financial education workshops and this website. It is intended to help you understand your rights and our obligations under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

If you have questions about this policy or how your data is handled, please contact us at [email protected].

1. Who We Are

Data Controller: Phra Capital
Address: 312 Asadang Road, Phra Nakhon, Bangkok 10200, Thailand
Contact: [email protected]

Phra Capital is a financial education provider operating workshop programmes for adults aged 40 and over. We are registered as a personal data controller under the PDPA with reference number TH-PDPA-2022-4471.

2. What Personal Data We Collect

We collect personal data in the following circumstances:

Workshop registration: name, email address, phone number, and any details you share in correspondence about your interest in a programme.
Contact form submissions: name, email address, phone number (optional), and message content.
Website usage: anonymised data about how visitors use our website, collected through analytics cookies if you have consented to their use.
Workshop participation: any personal financial information you choose to share during a session. This is voluntary and handled with strict confidentiality (see Section 5).

We do not collect sensitive personal data (such as health information, identification numbers, or biometric data) through our registration or contact processes.

3. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA:

Consent: for analytics cookies and for marketing communications (you may withdraw consent at any time).
Contractual necessity: to process registrations and administer your participation in a programme.
Legitimate interests: to respond to enquiries, improve our programmes, and maintain records of participation for programme quality purposes.
Legal obligation: to comply with applicable Thai law where required.

4. How We Use Your Data

We use personal data for the following purposes:

To process and confirm workshop registrations and payments.
To communicate with you about your enquiry or registration, including pre-session information and post-session follow-up.
To send programme-related updates if you have registered or expressed interest.
To improve the quality and content of our programmes based on anonymous feedback.
To maintain records required for our legal and operational obligations.

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties.

5. Data Shared in Workshop Sessions

During certain workshops — in particular the bank statement programme — participants may choose to share personal financial information with the group for the purposes of the exercise. This sharing is entirely voluntary. Any personal figures shared in the group are used anonymously during the exercise, and facilitators are contractually bound to treat all information discussed in sessions as confidential. Session content is not recorded, reported, or shared outside the facilitation team.

6. Data Retention

We retain personal data for the following periods:

Registration and contact data: for a period of three years from the date of last contact or last programme participation.
Anonymous feedback data: retained indefinitely for programme improvement purposes.
Cookie and analytics data: as specified in our Cookie Policy. Please see Cookie Policy for details.

After the applicable retention period, personal data is deleted or anonymised.

7. Third-Party Services

We use a small number of third-party services in the operation of this website and our programmes:

Google Analytics: to understand how visitors use our website (if analytics cookies are accepted). Data is processed by Google LLC under their terms of service.
Google Maps: for the embedded map on our homepage. Accessing the map may result in Google collecting data in accordance with their privacy policy.
Payment processor: payments for workshop registrations are processed by our payment provider. We do not store card details on our own systems.

We do not share personal data with any other third parties unless required by law.

8. Cookies

Our website uses cookies. Essential cookies are required for the site to function. Optional cookies — including analytics cookies — are only used with your consent. For full details, please see our Cookie Policy.

9. Your Rights Under the PDPA

As a data subject under Thai law, you have the following rights in relation to personal data we hold about you:

Right to access: to request a copy of personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of personal data, subject to our legal obligations.
Right to restriction: to request that we restrict our use of your data in certain circumstances.
Right to data portability: to receive your personal data in a structured, machine-readable format where technically feasible.
Right to object: to object to processing based on legitimate interests.
Right to withdraw consent: to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days.

If you believe your data protection rights have not been respected, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policy of any site you visit.

11. Children's Privacy

Our workshops and this website are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently received data from a minor, please contact us and we will delete it promptly.

12. Security Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include secure data storage, access controls limited to relevant personnel, and encrypted transmission of data where appropriate.

In the event of a data breach that poses a risk to individuals, we will notify affected individuals and the PDPC in accordance with PDPA requirements.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If the changes are material, we will provide notice on our website. We encourage you to review this policy periodically.

14. Contact

For any questions about this Privacy Policy or about how Phra Capital handles personal data, please contact:

Phra Capital
312 Asadang Road, Phra Nakhon, Bangkok 10200, Thailand
Email: [email protected]
Phone: +66 83 627 4519