Privacy Policy

1. Introduction

Quiet Years is committed to handling personal information responsibly and transparently. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it.

If you have questions about this policy, please contact us at [email protected].

2. What Data We Collect

We collect the following categories of personal data:

• Contact information — name, email address, and telephone number provided when enquiring about or booking a programme.
• Booking records — which programme you attended and the dates of sessions, retained for operational purposes.
• Communication records — emails and messages exchanged with us in the course of managing your booking.
• Website usage data — cookies and analytics data collected via our website, subject to your consent. See Section 5 for details.

We do not collect, copy, photograph, or retain any of the personal documents — pension statements, correspondence, or financial records — that participants bring to sessions.

3. How We Use Your Data

We use personal data for the following purposes:

• To manage your programme booking and send relevant session information.
• To respond to enquiries sent via our contact form or by email.
• To notify you of upcoming cohort start dates, if you have requested this.
• To process feedback forms submitted after completing a programme.
• To improve our services based on aggregated, anonymised feedback data.

We do not use your personal data for automated decision-making or profiling. We do not sell your data to third parties or share it with financial product providers.

4. Legal Basis for Processing

We process your personal data on the following legal bases under Thailand's Personal Data Protection Act (PDPA) B.E. 2562 (2019):

• Contract — processing necessary to manage your booking and deliver the service you have enrolled in.
• Legitimate interests — improving our programmes based on anonymised feedback data.
• Consent — for optional communications such as cohort notifications and for non-essential cookies.

5. Cookies

Our website uses cookies. Essential cookies are necessary for the site to function and are set without consent. Other cookie categories — including analytics and preferences — are set only with your consent. You can manage your preferences at any time via our Cookie Policy page.

6. Data Retention

Booking and contact records are retained for up to three years following the last session attended or the last communication received. After that period, they are deleted unless there is a specific operational reason to retain them. Website analytics data is retained in anonymised form only.

7. Data Security

We take reasonable technical and organisational steps to protect the personal data we hold. These include:

• Access to booking records limited to staff who need it for their role.
• Email communications with participants conducted via accounts with two-factor authentication.
• Paper records (if any) stored in a locked location on our premises.
• Regular review of data holdings to identify and delete what is no longer needed.

8. Your Rights

Under the Thailand PDPA you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate data.
• Right to erasure — to request deletion of your data, subject to legal and operational limitations.
• Right to withdraw consent — for processing based on consent, you may withdraw at any time.
• Right to object — to processing based on legitimate interests.
• Right to data portability — for data provided under consent or contract, in a structured, commonly used format.

To exercise any of these rights, contact [email protected]. We will respond within 30 days. You may also lodge a complaint with Thailand's Personal Data Protection Committee if you are not satisfied with our response.

9. Third-Party Links

Our website may contain links to external sources — government websites, public information resources, and similar. We are not responsible for the privacy practices of those sites and encourage you to read their own policies.

10. Children

Our programmes are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18.

11. Changes to This Policy

If we make material changes to this policy, we will update the Last Updated date at the top of this page. For significant changes, we will notify current programme participants by email where we have contact details.

12. Contact

For privacy-related questions or to exercise your rights:

Quiet Years
39 Convent Road, Silom, Bang Rak, Bangkok 10500, Thailand
[email protected]