Calmyear Get in Touch

Legal

Privacy Policy

Last updated:

1. Introduction

Calmyear ("we", "us", "our") is committed to protecting the personal data of everyone who uses our website and programmes. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.

This policy applies to all personal data processed in connection with our website at calmyear.world and our programmes — the First Questions Session, Year-Round Information Membership, and Community Seasons Programme.

Our registered address is 102 Lat Phrao Road, Chom Phon, Bangkok 10900, Thailand. If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

Information you provide directly

  • Name and email address when you submit an enquiry form
  • Phone number, if you choose to provide it
  • Message content from your enquiry
  • Payment information for programme enrolment (processed via our payment provider; we do not store card details)

Information collected automatically

  • Browser type, device type, and operating system (via analytics cookies, if you consent)
  • Pages visited and time spent on each page
  • Referring website or search term
  • IP address (anonymised where analytics tools permit)

Legal basis for processing

We process your data on the following bases under Thailand's Personal Data Protection Act B.E. 2562 (PDPA): consent (for optional cookies and marketing communications), contract performance (for programme delivery), and legitimate interest (for enquiry management and website security).

3. How We Use Your Data

  • To respond to your enquiries and answer questions
  • To administer your programme enrolment and send relevant session or membership information
  • To send seasonal reminders and content updates to members (membership only, opt-out available)
  • To improve the website based on aggregated usage data (analytics, if consented)
  • To comply with legal obligations under Thai law

We do not use your personal data for automated decision-making that produces legal or similarly significant effects.

4. Data Sharing

We do not sell personal data. We share data only in the following limited circumstances:

  • Payment processing: Enrolment payments are processed by a third-party payment gateway operating under its own data protection terms.
  • Email delivery: Programme and membership communications are sent via an email service provider. They process email addresses solely to deliver messages on our behalf.
  • Analytics: If you consent to analytics cookies, aggregated and anonymised usage data is shared with our analytics provider.
  • Legal compliance: We may disclose data if required to do so by Thai law or lawful request from a competent authority.

5. Data Retention

  • Enquiry data: retained for 24 months from date of enquiry, then deleted.
  • Participant programme records: retained for the duration of the programme plus 36 months, then deleted.
  • Payment records: retained for 7 years in accordance with Thai accounting regulations.
  • Analytics data: retained for 14 months by default, then automatically deleted by our analytics provider.

6. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), access controls limiting data access to authorised personnel, and regular review of our data handling practices. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant Thai supervisory authority within the timeframes required by the PDPA.

7. Cookies

We use essential cookies necessary for the website to function and, with your consent, analytics and preference cookies. Full details are available in our Cookie Policy. You can manage your cookie preferences at any time via the Cookie Policy page.

8. Your Rights

Under Thailand's PDPA, you have the following rights regarding your personal data:

  • Right of access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You may ask us to correct inaccurate data.
  • Right to erasure: You may request deletion of your data where we no longer have a lawful basis to retain it.
  • Right to data portability: Where processing is based on your consent, you may request your data in a structured, machine-readable format.
  • Right to object: You may object to processing based on legitimate interest.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, contact [email protected]. We will respond within 30 days.

If you are unsatisfied with our response, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

9. Third-Party Links

Our website may include links to official Thai government resources and other external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies separately.

10. Children's Privacy

Our programmes are designed for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that we have done so, we will delete that data promptly.

11. Changes to This Policy

We may update this policy from time to time. When we do, the revised version will be posted on this page with a new "Last updated" date. We encourage you to review it periodically. Material changes will be communicated to active members by email.

12. Contact

For privacy-related questions or to exercise your rights: