Privacy Policy

1. Introduction

Kinbridge ("we", "our", "us") is committed to handling personal data responsibly. This policy describes what information we collect, how we use it, how we protect it, and what your rights are under Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA). If you have questions about how we handle your data, please contact us at [email protected].

2. Data We Collect

We collect personal information in the following ways:

• Contact form submissions: name, email address, phone number (optional), and message content
• Session-related information: names of participants, session dates, and notes taken during facilitation sessions with explicit consent
• Website usage data: anonymised analytics data collected via cookies (see our Cookie Policy for details)
• Email correspondence: content of emails and enquiries sent to us directly

We do not collect sensitive personal data beyond what is necessary for service delivery, and we do not collect financial information directly.

3. Legal Basis for Processing

We process personal data on the following legal grounds:

• Consent: when you submit a contact form, book a session, or agree to session notes being recorded
• Contractual necessity: when processing is required to deliver services you have requested
• Legitimate interests: for website analytics and operational communications, where these do not override your rights

4. How We Use Your Data

• Responding to enquiries and booking requests
• Delivering facilitation sessions and preparing documentation
• Sending session summaries and follow-up materials to named participants
• Improving our website and services using anonymised analytics data
• Fulfilling legal and regulatory obligations under Thai law

We do not use personal data for direct marketing without your explicit consent, and we do not sell personal data to third parties.

5. Data Retention

We retain personal data only for as long as necessary:

• Contact form data: up to 12 months from last contact
• Session records: up to 36 months from the session date, or longer if required by a documented family arrangement
• Analytics data: up to 26 months in anonymised form

After these periods, data is securely deleted or anonymised.

6. Data Protection Measures

We take reasonable steps to protect personal data against unauthorised access, loss, or disclosure:

• Encrypted storage for digital session records
• Access controls limiting data to staff with a legitimate need
• Secure email for sending session documents to participants
• Regular review of our data-handling practices

In the event of a data breach that affects your rights, we will notify you and the relevant supervisory authority within the timeframes required by the PDPA.

7. Cookies

We use cookies on our website to understand how visitors use our site and to improve your experience. For full details on the types of cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Third-Party Services

We may share data with the following categories of third parties, each under appropriate data protection obligations:

• Website hosting and analytics: anonymised usage data may be processed by our hosting provider and analytics tools
• Email service providers: used to send session documents and correspondence

We do not share session content with any third party without the explicit written consent of all participants.

9. Third-Party Links

Our website may include links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their own privacy policies before submitting any personal information.

10. Children's Privacy

Our services are directed at adults (18 and over). We do not knowingly collect personal data from anyone under 18 without the consent of a parent or legal guardian. If you believe a minor's data has been submitted without appropriate consent, please contact us and we will remove it promptly.

11. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data (subject to legal retention requirements)
• Object to processing based on legitimate interests
• Withdraw consent where processing is based on consent
• Request restriction of processing in certain circumstances
• Lodge a complaint with Thailand's Personal Data Protection Committee

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

12. Policy Updates

We may update this policy from time to time. When we do, we will update the "last updated" date at the top of this page. Continued use of our website or services after any change constitutes acceptance of the updated policy. For significant changes, we will notify you by email where we hold your contact details.

13. Contact

For any questions about this policy or our data practices:

• Email: [email protected]
• Address: 76/5 Silom Road, Suriya Wong, Bang Rak, Bangkok 10500, Thailand