Privacy Policy

1. Introduction

Goldyears ("we", "us", "our") is a Bangkok-based organisation that provides educational workshops on retirement and pension structures in Thailand. We are committed to handling the personal data of everyone who interacts with us — whether through our website, session registration, or direct contact — with care and transparency.

This Privacy Policy explains what personal data we collect, why we collect it, how it is used and stored, and what rights you have over it. It applies to data collected through our website at goldyearsag.live, our session registration process, and any direct communication with our team.

If you have questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data in the following contexts:

• Website contact form: name, email address, phone number (optional), and any message content you provide.
• Session registration: name, email address, phone number, and the session you are registering for.
• Employer programme enquiries: company name, contact name, email address, and information about your team's requirements.
• Website analytics: anonymised data about page visits, browser type, and device via analytics cookies (only if you consent).

We do not collect sensitive personal data such as national identification numbers, financial account details, or health information.

3. Legal Basis for Processing

We process personal data on the following legal grounds under Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

• Contract performance: processing your registration data to confirm and administer your place in a session.
• Legitimate interests: responding to enquiries and sending session-related communications.
• Consent: using analytics cookies to understand website usage (you may withdraw consent at any time via our Cookie Policy settings).

4. How We Use Your Data

• To confirm your registration and send pre-session preparation notes.
• To respond to your questions and enquiries.
• To issue receipts and invoices where applicable.
• To send you information about upcoming session dates if you have expressed interest (you may opt out at any time).
• To improve the quality and clarity of our sessions using anonymised feedback data.
• To fulfil legal obligations and maintain records as required.

We do not sell, rent, or disclose your personal data to third parties for marketing purposes.

5. Data Retention

• Session registration data: retained for six months after the session date, then securely deleted.
• Financial records (receipts, invoices): retained for seven years in accordance with Thai accounting requirements.
• General enquiry correspondence: retained for twelve months, then deleted unless an ongoing relationship exists.
• Analytics data: anonymised and retained for twelve months, then deleted.

6. Data Protection Measures

• All data is stored on password-protected systems with restricted access limited to team members who need it for their role.
• Data transmitted via our contact form is sent over an encrypted connection (HTTPS).
• We review our data handling practices at least annually.
• In the event of a data breach that poses a risk to affected individuals, we will notify the relevant parties within 72 hours of becoming aware, in accordance with PDPA obligations.

7. Cookies

Our website uses cookies to maintain session functionality and, with your consent, to collect anonymised analytics data. Essential cookies cannot be disabled as they are required for the site to function. You can manage optional cookie settings at any time via our Cookie Policy page.

8. Your Rights Under the PDPA

As a data subject under Thailand's PDPA, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your data, subject to legal retention requirements.
• Data portability: request your data in a commonly used, machine-readable format.
• Object to processing: object to processing based on legitimate interests.
• Withdraw consent: withdraw consent to processing at any time without affecting the lawfulness of prior processing.
• Lodge a complaint: complain to the Personal Data Protection Committee of Thailand if you believe your rights have been infringed.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external websites, including Thai government portals referenced in our session materials. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our workshops are designed for adults (18 years and over). We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of our website or services after a change constitutes acceptance of the updated policy. For significant changes, we will provide notice via email to registered participants.

12. Contact

Data Controller: Goldyears
Address: 58 Wireless Road, Lumphini, Bangkok 10330, Thailand
Privacy enquiries: [email protected]
General enquiries: [email protected]
Telephone: +66 2 873 4019