Privacy Policy | Thstarlinker Financial Education Bangkok

1. Introduction

Thstarlinker is committed to protecting your personal information and handling it with care, transparency, and respect. This Policy explains what data we collect, why we collect it, and how you can exercise your rights under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

This Privacy Policy applies to all visitors to thstarlinker, prospective and current clients of Thstarlinker, and anyone who contacts us through our website, by telephone, or by email. By using our website or engaging our services, you acknowledge that you have read and understood this Policy.

Thstarlinker provides financial education services only. We are not a licensed financial advisor, broker, or investment firm, and we do not provide regulated financial advice.

2. Data Controller

The data controller responsible for your personal data is:

3. Personal Data We Collect

We collect only the personal data necessary for the purposes described in this Policy.

Identity Data: full name, preferred name or title.

Contact Data: email address, telephone number, postal address (if provided).

Enquiry and Communication Data: content of messages via our contact form, programme interests, records of correspondence.

Technical and Usage Data (automatically collected): IP address and approximate geolocation, browser type, pages visited, device type and operating system.

We do not collect sensitive personal data such as financial account numbers, national identification numbers, health records, or biometric data through our website.

4. Lawful Basis for Processing

Under the PDPA, we rely on the following lawful bases:

Consent — where you have given clear consent for marketing communications or optional cookies. You may withdraw consent at any time.
Contractual Necessity — where processing is necessary to fulfil or prepare a service agreement.
Legitimate Interests — where our interests in operating and improving our services do not override your rights.
Legal Obligation — where Thai law or regulatory requirements mandate processing.

5. How We Use Your Personal Data

To respond to enquiries submitted via our contact form or telephone
To identify suitable programmes for your needs and arrange educational sessions
To send service-related communications (confirmations, follow-up materials)
To send educational content or programme updates where you have opted in
To analyse website usage and improve our content
To comply with legal obligations and prevent fraud

We will not use your data for any incompatible purpose without first obtaining your consent.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share it in these limited circumstances:

Service providers — hosting, email delivery, and analytics platforms bound by data processing agreements
Analytics platforms — Google Analytics 4, Meta Pixel, and Bing Pixel (see Cookie Policy for opt-out options)
Legal requirements — as required by Thai law, court order, or regulatory authority
Business transfers — in a merger or acquisition, subject to equivalent privacy protections

7. Data Retention

Enquiry records: 12 months from initial contact (unless a service relationship develops)
Client records: 5 years from the end of engagement
Marketing consent records: until you withdraw consent
Website analytics data: as configured in the relevant platform (typically 14 months)

Once no longer required, personal data is deleted or anonymised securely.

8. Your Rights Under the PDPA

Right of access — to receive a copy of personal data we hold about you
Right to rectification — to correct inaccurate or incomplete data
Right to erasure — to request deletion, subject to legal retention requirements
Right to restriction — to limit how we use your data in certain circumstances
Right to data portability — to receive your data in a structured format where applicable
Right to object — to object to processing based on legitimate interests or direct marketing
Right to withdraw consent — at any time where processing is consent-based

To exercise any of these rights, contact us at [email protected]. We respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

9. Cookies

We use cookies and similar technologies on our website. Full details, including cookie types, purposes, and management options, are available in our Cookie Policy. You may adjust preferences using the consent banner on your first visit or through your browser settings.

10. Data Security

We implement appropriate technical and organisational measures, including HTTPS encryption, staff access controls, and regular security reviews. No electronic transmission is entirely secure; in the event of a breach likely to affect your rights, we will notify you and relevant authorities as required by the PDPA.

11. Third-Party Websites and Services

This Policy applies only to Thstarlinker's website. We are not responsible for third-party privacy practices. Analytics and advertising tools used on our site are governed by their own policies, and you may opt out via our cookie consent tool or each provider's opt-out mechanism.

12. Changes to This Policy

We may update this Policy periodically. The "Last updated" date at the top of the page reflects the most recent revision. For material changes affecting how we use your data, we will make reasonable efforts to notify you directly.

13. Contact Us

We aim to respond to all privacy enquiries within 30 days.