Privacy Policy

1. Introduction

Quietharbor ("we", "us", "our") is committed to protecting the privacy of everyone who uses our website, enquires about our sessions, or attends our pension document information and record organising services. This policy explains what personal information we collect, how we use it, and the rights you have in relation to it.

Our registered place of business is 31/7 Phahonyothin Road, Chatuchak, Bangkok 10900, Thailand. For privacy-related enquiries, please contact us at [email protected].

This policy is governed by Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA). If you are located in the European Economic Area, please note that we also observe the General Data Protection Regulation (GDPR) as applicable to our processing of your personal data.

2. Data We Collect

We collect personal data in the following circumstances:

• Enquiry form submissions: name, email address, and optionally phone number and a message.
• Session bookings: name, email address, phone number and payment confirmation details.
• Website usage: anonymised technical data via analytics tools (page views, device type, approximate location at country level). No personally identifiable information is collected through analytics.
• Correspondence: any information you include in emails or messages sent to us.

We do not collect sensitive personal data (health information, financial account details, or identification documents). We do not copy or retain any retirement or pension documents you bring to an organising session.

3. Legal Basis for Processing

• Consent: When you submit an enquiry form, you consent to us using your details to respond to your enquiry.
• Contract: When you book a session, we process your data to fulfil that booking.
• Legitimate interests: We may process anonymised usage data to improve our website, provided this does not override your rights.

4. How We Use Your Data

• To respond to enquiries, typically within one working day.
• To confirm, manage and follow up on session bookings.
• To send session-related information (date reminders, guide attachments).
• To improve our website and session content based on aggregated usage data.
• To comply with applicable law or respond to legal requests.

We do not use your data for automated decision-making or profiling. We do not send marketing emails without your explicit agreement.

5. Data Sharing

We do not sell or rent your personal data to third parties. We may share limited data with:

• Payment processors: to complete session booking payments securely. These processors are bound by their own privacy policies and do not retain card data on our behalf.
• Website hosting and email providers: who process data only as necessary to operate the service.
• Legal and regulatory authorities: if required to do so by Thai law or court order.

6. Data Retention

• Enquiry messages: retained for 12 months and then deleted unless a session booking follows.
• Session booking records: retained for 3 years for administrative purposes, then deleted.
• Email correspondence: retained for 2 years, then reviewed for deletion.

7. Cookies

Our website uses essential cookies to function correctly and optional analytics cookies to understand how visitors use the site. You can control cookie preferences via the cookie banner on our homepage. Full details are available in our Cookie Policy.

8. Your Rights

Under the Thai PDPA and, where applicable, the GDPR, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct inaccurate data.
• Right to erasure: to request deletion of your data in certain circumstances.
• Right to restrict processing: to ask us to limit how we use your data.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests.
• Right to withdraw consent: at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, write to [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee or, for EEA residents, with your local supervisory authority.

9. Children's Privacy

Our sessions and services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently received data from a minor, please contact us and we will delete it promptly.

10. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of those third-party sites and encourage you to read their individual privacy policies.

11. Policy Updates

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of our website after changes are posted constitutes your acceptance of the updated policy. For significant changes, we will notify existing session participants by email.

12. Contact

For any privacy-related questions or to exercise your rights, please contact:

Quietharbor
31/7 Phahonyothin Road, Chatuchak, Bangkok 10900, Thailand
Email: [email protected]
Phone: +66 65 738 2014