Privacy Policy

1. Introduction

Kithora ("we", "us", "our") is committed to handling the personal information you share with us carefully and responsibly. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it.

This policy applies to all personal information collected through our website, enquiry forms, and programme enrolment processes. Kithora operates from 188 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand.

For questions about how we handle your data, contact us at [email protected].

2. Data We Collect

We collect only information that is necessary for operating our education programmes and responding to enquiries:

• Contact details — name, email address, and phone number (where provided via our enquiry form or enrolment process).
• Programme participation records — which programme(s) you have attended or enrolled in, and dates of participation.
• Feedback responses — post-programme satisfaction responses, collected anonymously or identified, depending on whether you choose to include your name.
• Website usage data — via cookies and analytics tools, as described in our Cookie Policy.

We collect data via the website contact form, programme enrolment forms, and direct correspondence (email or phone). The legal basis for processing is your consent (for enquiries and optional analytics) and the performance of a contract (for programme participation).

3. How We Use Your Data

• Responding to enquiries about our programmes.
• Processing enrolments and managing programme logistics (scheduling, communications).
• Sending programme-related updates to enrolled participants.
• Improving our programmes using anonymised or aggregated feedback data.
• Analysing website usage in aggregate to improve the site (subject to cookie consent).

We do not sell personal data. We do not share your data with third-party marketing platforms. We may share data with service providers who assist with website hosting or communications, under data processing agreements that bind them to handle your data appropriately.

Retention: Contact and enrolment data is retained for up to 3 years from your last interaction with Kithora, after which it is deleted. You may request earlier deletion at any time.

4. Data Protection Measures

We take reasonable technical and organisational measures to protect your data. These include:

• Secure, encrypted data transmission (HTTPS) on our website.
• Access to participant records restricted to staff with a direct operational need.
• Periodic internal review of data handling practices.
• In the event of a data breach that may affect your rights, we will notify you without undue delay.

5. Cookies

Our website uses cookies. Essential cookies are necessary for the site to function. Optional analytics and preference cookies are only used if you accept them via our cookie banner. Full details are in our Cookie Policy.

6. Your Rights

Under Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA), you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate data.
• Right to erasure — to request deletion of your data, subject to legal retention obligations.
• Right to data portability — to receive your data in a structured, commonly used format.
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe your rights have been infringed, you may lodge a complaint with the Thailand Personal Data Protection Committee.

7. Third-Party Links

Our website may contain links to external resources. Kithora is not responsible for the privacy practices of those sites and recommends you review their own privacy policies before providing any personal information.

8. Children's Privacy

Kithora's programmes and website are directed at adults (18 years and over). We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us so we can remove it promptly.

9. Policy Updates

We may update this policy from time to time. Where changes are material, we will notify enrolled participants by email and display a prominent notice on this page. The date at the top of this page reflects when the policy was last revised.

10. Contact

Data Controller: Kithora

188 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand

Privacy enquiries: [email protected]