Privacy Policy

Introduction

Wrenford ("we," "our," or "us") is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you enroll in our financial education programs or interact with our services in Bangkok, Thailand.

We comply with Thailand's Personal Data Protection Act (PDPA) and maintain data handling practices appropriate for educational services. This policy applies to all participants, prospective participants, and visitors to our programs.

Information We Collect

Personal Information You Provide

When you enroll in programs or contact us, we collect:

• Full name and preferred name
• Email address and phone number
• Mailing address (if requesting physical materials)
• Payment information (processed through secure payment providers)
• Program preferences and learning objectives
• Financial situation details you choose to share during programs (for educational context only)

Information Collected Automatically

Our website may collect:

• Browser type and device information
• IP address and approximate location
• Pages visited and time spent on site
• Referral source

We use cookies and similar technologies as described in our Cookie Policy.

How We Use Your Information

We use collected information for these purposes:

• Program Delivery: To administer your enrollment, schedule sessions, and provide educational materials
• Communication: To send program updates, session reminders, and respond to inquiries
• Payment Processing: To process enrollment fees and maintain financial records
• Service Improvement: To understand how participants use our programs and improve content
• Legal Compliance: To meet Thai legal and regulatory requirements
• Marketing (with consent): To inform you about new programs and relevant educational content

Legal Basis for Processing

We process your personal data based on:

• Contract Performance: Processing necessary to deliver educational services you've enrolled in
• Consent: When you've explicitly agreed to data processing, such as receiving marketing emails
• Legitimate Interest: For program improvement and administrative efficiency, balanced against your rights
• Legal Obligation: To comply with Thai tax, financial, and business regulations

Data Sharing and Disclosure

We share your information only in these limited circumstances:

• Service Providers: Payment processors, email service providers, and website hosting services operating under confidentiality agreements
• Legal Requirements: When required by Thai law, court order, or government request
• Business Transfers: In the event of merger, acquisition, or sale of assets, with notice to affected participants

We do not sell, rent, or trade your personal information to third parties. We do not share participant information with financial product providers or use data for product marketing purposes.

Data Retention

We retain your information for:

• Enrollment Records: 7 years after program completion, as required by Thai business record-keeping regulations
• Payment Information: 7 years for tax and accounting purposes
• Marketing Consent: Until you withdraw consent or request deletion
• Program Materials: Indefinitely for participants who completed programs, unless deletion is requested

After retention periods expire, we securely delete or anonymize data so it cannot identify individuals.

Data Security

We implement appropriate security measures to protect your information:

• Encryption of data transmitted over the internet (SSL/TLS)
• Secure storage systems with access controls
• Regular security assessments of our systems
• Limited access to personal information by authorized staff only
• Secure disposal of physical documents containing personal data

While we take reasonable steps to protect your data, no internet transmission is completely secure. We encourage you to use strong passwords and protect your account credentials.

Your Rights Under Thai PDPA

As a data subject in Thailand, you have these rights:

• Right to Access: Request copies of personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Restrict Processing: Limit how we use your information in certain circumstances
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing at any time (where processing is based on consent)

To exercise these rights, contact us at [email protected]. We will respond within 30 days as required by Thai law.

Cookies and Tracking

Our website uses cookies to enhance functionality and analyze usage. For detailed information about cookies we use and how to manage them, please see our Cookie Policy.

Third-Party Links

Our website may contain links to third-party sites, such as payment processors or educational resources. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Children's Privacy

Our programs are designed for adults aged 18 and over. We do not knowingly collect information from individuals under 18. If we become aware that we have collected data from someone under 18, we will take steps to delete that information.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify enrolled participants of significant changes via email. The "Last Updated" date at the top of this policy indicates when it was most recently revised.

Continued use of our services after policy changes constitutes acceptance of the updated policy.

Contact Information

For questions about this Privacy Policy or to exercise your data rights, contact:

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee. Contact details for the committee can be found on the Thai government's official PDPA resources.