Privacy Policy
Last Updated: 28 March 2026
1. Introduction
Tawan Pridi ("we," "us," or "our") is committed to handling your personal information with care and transparency. This Privacy Policy describes how we collect, use, share, and protect data when you visit our website at tawanpen.club or participate in our financial education programmes.
We operate under applicable Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA), and we aim to handle your data in a manner consistent with the trust you place in us.
Questions about this policy may be directed to [email protected].
2. Information We Collect
2.1 Information You Provide Directly
- Full name — to address you properly and maintain programme records
- Email address — for programme correspondence and updates
- Phone number — for scheduling and direct communication if needed
- Enquiry or message content — submitted through our contact form
2.2 Automatically Collected Data
- IP address and approximate location
- Browser type, version, and operating system
- Pages visited and time spent on the site
- Referring URLs
- Cookie data (see Section 6 and our Cookie Policy)
2.3 Legal Basis for Processing
We process personal data under the following legal bases as defined by the PDPA:
- Consent — for marketing communications and optional cookies
- Contractual necessity — to deliver programme services you have enrolled in
- Legitimate interest — to improve our educational offerings and website performance
- Legal obligation — where Thai law requires us to retain certain records
3. How We Use Your Information
We use the information we collect to:
- Respond to your enquiries and schedule consultations
- Deliver and administer financial education programmes
- Send programme-related updates, materials, and session reminders
- Personalise content and programme recommendations where appropriate
- Improve our website, content, and educational materials
- Comply with legal and regulatory obligations under Thai law
- Send periodic newsletters or information about related programmes — only with your consent
We do not sell or rent your personal data to third parties for their marketing purposes.
4. Data Sharing and Third Parties
We may share your data with carefully selected service providers who support our operations. These include:
- Email delivery services — for sending session confirmations and programme materials
- Website analytics providers (such as Google Analytics) — to understand how visitors use our site
- Payment processing services — for secure handling of enrolment fees
- Advertising platforms — only when you have consented to marketing cookies
All third-party service providers are required to handle your data in a manner consistent with this policy and applicable Thai law. We do not share personal data with parties outside Thailand without appropriate safeguards in place.
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy:
- Enquiry records — up to 12 months from your last contact
- Programme participant records — 3 years from programme completion for quality and reference purposes
- Financial transaction records — 7 years, as required by Thai accounting regulations
- Marketing consent records — until you withdraw consent
- Website analytics data — up to 26 months, as per analytics provider standards
After the relevant retention period, data is securely deleted or anonymised.
6. Data Protection and Security
We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or disclosure. These measures include:
- SSL/TLS encryption for data transmitted via our website
- Access controls limiting data access to authorised personnel only
- Secure storage of participant records
- Regular review of our data handling procedures
- Staff awareness of data protection responsibilities
While we take these steps seriously, no method of internet transmission or electronic storage is completely secure. We encourage you to use strong, unique passwords and to contact us promptly if you believe your data has been compromised.
7. Cookies
Our website uses cookies to improve functionality and understand how visitors engage with our content. Cookie types we use include:
- Essential cookies — necessary for the website to function correctly
- Analytics cookies — help us understand visitor behaviour and improve the site
- Preference cookies — remember your settings for future visits
- Marketing cookies — used only with your explicit consent
For full details and to manage your cookie preferences, please see our Cookie Policy.
8. Your Rights Under the PDPA
As a data subject under the Personal Data Protection Act B.E. 2562, you have the following rights:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your data where it is no longer needed.
Right to Withdraw Consent
Withdraw consent for marketing communications at any time.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interest.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you feel your rights have not been addressed, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand.
9. External Links
Our website may include links to external resources, such as government healthcare programmes or financial regulatory bodies. We are not responsible for the privacy practices of these third-party websites and encourage you to review their respective policies before submitting any personal data.
10. Minimum Age
Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from persons under 18 years of age. If you believe a minor has submitted data to us, please contact us promptly so we may take appropriate action.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page.
We encourage you to review this page periodically. Continued use of our website after any update constitutes acceptance of the revised policy.
12. Contact Information
For questions, requests, or concerns relating to this Privacy Policy or your personal data, please reach us through any of the following: