Privacy Policy

1. Introduction

Quietacre ("we", "us", "our") is committed to handling personal information responsibly. This policy explains what personal data we collect, why we collect it, how it is stored, and what rights you have in relation to it. Our services are based in Ubon Ratchathani, Thailand, and this policy is informed by Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

2.1 Information You Provide

• Name, email address, and phone number — when you complete our contact form or register for a session
• Any message content you choose to include in an enquiry

2.2 Automatically Collected Data

• Standard server logs (IP address, browser type, pages visited, time of visit) — retained for up to 90 days
• Cookie data as described in our Cookie Policy

2.3 Data We Do Not Collect

We do not collect financial information, health data, identification documents, or any special category personal data as defined under the PDPA.

3. Legal Basis for Processing

We process personal data on the following grounds:

• Consent — when you submit a contact form or agree to cookies
• Legitimate interest — to respond to enquiries and to maintain the basic security and functionality of our website
• Contractual necessity — when processing data to deliver a session or toolkit you have paid for

4. How We Use Your Data

• To respond to your enquiry and provide information about our sessions
• To process attendance registrations and deliver services you have purchased
• To send transactional communications related to your booking (confirmation, session details)
• To improve our website based on aggregate usage patterns

We do not use personal data for automated decision-making and we do not send marketing emails without your explicit consent.

5. Data Sharing

We do not sell, rent, or trade personal data. We may share data with:

• Hosting and infrastructure providers — only to the extent necessary to operate the website and email systems
• Analytics providers — where you have consented to analytics cookies; data is aggregated and non-identifiable

Any third parties we work with are bound by data processing agreements consistent with the PDPA.

6. Data Retention

• Enquiry and contact form data: retained for 12 months from the date of submission, then deleted
• Session attendance records: retained for 3 years for operational purposes, then deleted
• Server logs: deleted after 90 days

7. Data Protection Measures

• All data transmitted via our website is encrypted in transit using SSL/TLS
• Access to personal data is restricted to staff with a direct operational need
• We review our data handling practices annually

In the event of a data breach that poses a risk to affected individuals, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and notify affected individuals without undue delay where required.

8. Cookies

We use cookies to support basic functionality and — where you consent — to understand how our website is used. Please see our Cookie Policy for full details on cookie types and how to manage your preferences.

9. Your Rights

Under Thailand's PDPA, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your data, subject to our legal obligations
• Right to portability — to receive your data in a structured, machine-readable format
• Right to object — to object to certain types of processing
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to third-party resources. We are not responsible for the privacy practices of external sites and encourage you to review their privacy policies independently.

11. Age

Our services are intended for adults aged 18 and over. We do not knowingly collect data from individuals under 18. If we become aware that data from a minor has been submitted, we will delete it promptly.

12. Policy Updates

We may update this policy from time to time. When changes are material, we will update the "Last Updated" date at the top of this page. Continued use of our website following any update constitutes acceptance of the revised policy.

13. Contact

Data Controller: Quietacre
Address: 92 Thanon Chayangkun, Nai Mueang, Mueang Ubon Ratchathani, Ubon Ratchathani 34000, Thailand
Email: [email protected]

For questions about data protection or to lodge a complaint, you may also contact the Office of the Personal Data Protection Committee (PDPC) of Thailand.