Privacy Policy
Last Updated: 15 May 2025 | Warmstead, Bangkok, Thailand
1. Introduction
Warmstead ("we", "us", "our") is committed to protecting the personal data of everyone who interacts with our programs and website. This policy explains what data we collect, why we collect it, how we use it, and the rights you have under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
This policy applies to visitors to our website, individuals who submit contact enquiries, and participants enrolled in any of our programs. If you have questions about this policy, contact us at [email protected].
2. Data We Collect
Contact and enquiry data: When you use our contact form or email us, we collect your name, email address, and phone number if you choose to provide it, and the content of your message.
Program enrollment data: When you enroll in a workshop, access coordination tools, or join a community group, we collect your name, contact details, and any scheduling preferences relevant to your participation.
Website usage data: We use cookies and analytics tools to understand how our website is used. See Section 5 and our Cookie Policy for details.
Legal basis for processing: Data is processed on the basis of your consent (for enquiries and newsletter communications), performance of a service contract (for enrolled program participants), and our legitimate interest in operating and improving our programs.
Retention: Contact enquiry data is retained for 24 months. Program participant data is retained for 36 months from the end of your most recent enrollment. Analytics data is retained for 14 months.
3. How We Use Your Data
- Responding to enquiries and coordinating program enrollment
- Sending program schedules, updates, and relevant session materials
- Administering coordination tool access and onboarding sessions
- Improving our website and program content based on usage patterns
- Complying with legal obligations under Thai law
We do not sell personal data to third parties. We do not share participant data with other participants. We do not use your data for purposes other than those listed above without your prior consent.
4. Data Protection Measures
We use industry-standard measures to protect your data, including encrypted storage, access controls limited to authorized staff, and regular review of our data handling practices. In the event of a data breach that affects your rights or freedoms, we will notify you and the relevant Thai supervisory authority as required under the PDPA.
Internal access to personal data is limited to staff who need it to perform their role. We do not transfer personal data outside of Thailand unless required by law or with your explicit consent.
5. Cookies
Our website uses essential cookies to function correctly, and optional analytics and preference cookies that you can accept or decline. For a full breakdown of the cookies we use and how to manage them, see our Cookie Policy.
6. Your Rights Under PDPA
As a data subject under Thailand's PDPA, you have the following rights:
- Right to access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request correction of inaccurate or incomplete data.
- Right to erasure: You may request deletion of your data, subject to legal retention obligations.
- Right to data portability: You may request your data in a portable format where technically feasible.
- Right to object: You may object to processing based on legitimate interest.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.
- Right to lodge a complaint: You may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have been infringed.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
7. Third-Party Links
Our website may contain links to external resources or organizations. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
8. Children's Privacy
Our programs and website are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data to us, contact us at [email protected] and we will delete it promptly.
9. Policy Updates
We may update this policy from time to time. Any significant changes will be noted at the top of this page with a revised "Last Updated" date. Continued use of our website or programs after a change is posted constitutes acceptance of the updated policy.
10. Contact
Data Controller: Warmstead
Address: 159 Thanon Withayu, Lumphini, Pathum Wan, Bangkok 10330, Thailand
Privacy enquiries: [email protected]