Privacy Policy

1. Introduction

Suvanna Wealth ("we", "us", "our") operates financial education programmes for adults in Thailand. This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website or register for our programmes.

We are committed to handling personal information responsibly and in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). This policy applies to information collected through our website at suvannawq.world and through the programme registration process.

Questions about this policy may be directed to: [email protected]

2. Personal Data We Collect

We collect only the personal data necessary to administer programme registration, respond to enquiries, and deliver sessions. This includes:

• Contact information: Full name, email address, and telephone number (telephone is optional for enquiries).
• Programme preferences: Which programme you are enquiring about or registered for.
• Messages: Any content you submit through the contact form.
• Website usage data: Standard analytics data if you have consented to analytics cookies (see Cookie Policy).

Legal basis for processing: Your data is processed on the basis of your consent (enquiry form submission), performance of a contract (programme registration), and our legitimate interest in administering programme logistics.

Retention: Contact and registration data is retained for a period of three years from your last interaction with us, after which it is securely deleted. Analytics data is retained for twelve months.

3. How We Use Your Data

• Responding to enquiries about our programmes
• Processing programme registration and sending session details
• Sending session reminders and materials relevant to your registration
• Conducting the follow-up phone review (Healthcare Planning programme only)
• Improving our website and programme offerings through anonymised analytics

We do not: sell your data, share it with financial product providers, or use it to send unsolicited marketing. We do not send marketing communications after your programme concludes unless you specifically request updates.

4. Data Protection Measures

• Data is stored on password-protected, access-controlled systems
• Website data transfers are protected by TLS/SSL encryption
• Access to participant data is restricted to staff with a specific need for it
• In the event of a data breach, we will notify affected individuals within 72 hours of becoming aware
• Data access logs are reviewed periodically as part of our internal security practice

5. Cookies

Our website uses cookies. Essential cookies are required for basic site functionality and cannot be disabled. Analytics and preference cookies are optional and require your consent.

For full details, including how to manage your preferences, please see our Cookie Policy.

6. Your Rights Under Thailand's PDPA

Under the Personal Data Protection Act B.E. 2562, you have the following rights in relation to your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate information.
• Right to erasure: Request deletion of your data, subject to any legal obligations we may have to retain it.
• Right to restriction: Ask us to limit the processing of your data in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used format.
• Right to object: Object to processing based on our legitimate interests.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe we have not handled your data correctly, you may lodge a complaint with Thailand's Personal Data Protection Committee.

7. Third-Party Links

Our website may contain links to external websites, including Google Maps for our location. We are not responsible for the privacy practices of third-party sites. Please review the privacy policies of any external sites you visit.

8. Age Restriction

Our programmes are designed for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review the policy periodically. Continued use of our website or services after a change constitutes acceptance of the updated terms.

10. Data Controller Contact