Privacy Policy

1. Introduction

Ratana Group ("we", "us", "our") operates from 521 Sathon Tai Road, Sathon, Bangkok 10120, Thailand. This Privacy Policy explains how we collect, use, store, and protect personal information in connection with our financial education programmes and website at ratanagra.world.

We are committed to handling personal data responsibly and in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). If you have questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data in the following situations:

• Enquiry Form: Name, email address, and optionally phone number and message content, submitted through the contact form on our website.
• Programme Registration: Name and contact details used to confirm and administer your attendance at a programme.
• Cookies and Analytics: Website usage data collected through cookies (see our Cookie Policy for details).
• Feedback Forms: Written responses submitted through post-programme feedback forms. These are anonymised before being used for content improvement.

We do not collect sensitive financial documents or personal financial records. Any documents participants bring to sessions are handled during the session only and are not retained by Ratana Group.

3. Legal Basis for Processing

• Consent: Where you have given explicit consent, such as submitting a contact form or accepting cookies.
• Contractual necessity: Where processing is necessary to fulfil a programme booking or respond to a service enquiry.
• Legitimate interest: For improving our website and understanding how it is used, where such interest does not override your rights.
• Legal obligation: Where we are required by Thai law to retain or process certain information.

4. How We Use Your Data

• Responding to enquiries submitted through our website contact form
• Confirming and administering programme bookings
• Sending programme details, scheduling information, and pre-session materials
• Issuing invoices for programme fees
• Improving the content and structure of our website
• Meeting legal record-keeping obligations where applicable

We do not use your personal data for automated decision-making or profiling. We do not use your data to send unsolicited marketing communications unrelated to Ratana Group programmes.

5. Data Sharing

We do not sell, rent, or trade personal data with third parties. We may share data in the following limited circumstances:

• Service providers: Website hosting and email infrastructure providers operating under data processing agreements. These providers process data solely on our instruction.
• Analytics: Aggregated, anonymised website usage data may be processed by analytics tools. Where identifiable data is involved, this is subject to consent.
• Legal requirement: Where disclosure is required by Thai law or a valid legal process.

6. Data Retention

• Enquiry data: Retained for 12 months from the date of the last contact, then deleted unless a programme booking has resulted.
• Booking and invoicing records: Retained for 7 years in accordance with Thai accounting and tax law requirements.
• Website analytics data: Retained in accordance with the settings of the analytics tool used; typically 14 months.
• Feedback forms: Anonymised within 30 days of receipt; identifiable data is not retained.

7. Cookies

Our website uses cookies to understand how the site is accessed and used. For a full explanation of the cookies we use and how to manage your preferences, see our Cookie Policy.

8. Data Protection Measures

• Website connections are encrypted using TLS (HTTPS).
• Access to personal data is restricted to those who require it to carry out their role.
• Physical documents containing personal data are stored securely and disposed of appropriately.
• In the event of a data breach that presents a risk to individuals, we will notify affected parties and the relevant authority in accordance with PDPA requirements.

9. Your Rights Under the PDPA

Under the Thailand Personal Data Protection Act, you have the following rights:

• Right of access: To request a copy of the personal data we hold about you.
• Right to rectification: To request correction of inaccurate or incomplete data.
• Right to erasure: To request deletion of your personal data where there is no lawful reason for us to retain it.
• Right to restriction: To request that we restrict how your data is processed in certain circumstances.
• Right to data portability: To receive your data in a portable format where technically feasible.
• Right to object: To object to processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies directly.

11. Children's Privacy

Our programmes and website are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that personal data has been submitted by someone under 18, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will note the updated date at the top of this page. Continued use of our website or services after any update constitutes acceptance of the revised policy.

13. Contact

For privacy-related enquiries, requests, or concerns: