Privacy Policy

1. Introduction

Nakara Finance ("we", "us", "our") is committed to handling personal data with care. This policy explains what personal data we collect in connection with our financial education programmes and website, how we use it, how long we retain it, and what rights you have as a data subject. We operate under Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA). If you have questions about this policy, please write to us at [email protected].

2. Data we collect

We collect personal data through our contact form, programme registration process, and website analytics. The categories of data are:

• Name and email address (required when you contact us or register)
• Telephone number (optional, provided voluntarily)
• Programme and payment records (when you register for a programme)
• Correspondence records (emails and messages exchanged with us)
• Website usage data (via cookies — see Section 6)

We do not collect financial account numbers, national identification numbers, or sensitive financial data as part of our enquiry or registration process.

3. Legal basis for processing

We process personal data on the following legal bases under the PDPA:

• Contract performance — processing necessary to register you for a programme and manage your participation
• Legitimate interests — responding to enquiries and maintaining programme and correspondence records
• Consent — for any optional communications, including information about forthcoming programme dates

4. How we use your data

• To respond to your enquiry about programmes
• To confirm your registration and manage your place in a cohort
• To send payment information and receipts
• To contact you with information about forthcoming programme dates (with your consent)
• To maintain records required for our operations and tax compliance
• To understand how our website is used, in aggregate and anonymised form

We do not use personal data for automated decision-making or profiling. We do not sell personal data to any third party.

5. Data sharing

We do not share your personal data with any financial product provider, broker, or marketing company. Personal data may be shared only in the following limited circumstances:

• With our payment processor (Bangkok Bank), to the extent required to process programme fees
• With website analytics providers (where you have consented to analytics cookies), in aggregated or pseudonymised form
• With legal or regulatory authorities, if required to comply with applicable Thai law

6. Cookies

Our website uses cookies to remember your preferences and, with your consent, to understand how the website is used. Essential cookies are required for the website to function. Optional cookies (analytics and preference) are set only with your consent. You may manage your preferences at any time via our Cookie Policy page.

7. Retention periods

• Enquiry records: retained for 12 months from last contact, then deleted
• Programme registration and payment records: retained for 5 years from programme completion (Thai accounting requirements)
• Correspondence: retained for 24 months, then reviewed and deleted unless a specific reason for retention exists
• Website analytics data: retained in aggregated form; individual session data deleted after 14 months

8. Data protection measures

We store personal data on password-protected systems. Email correspondence is accessed via secured accounts. Payment records are retained in encrypted files. We review our data handling practices annually. In the event of a data breach that poses a risk to your rights, we will notify you and the Office of the Personal Data Protection Committee (PDPC) as required by the PDPA.

9. Your rights under the PDPA

As a data subject under Thai law, you have the following rights:

• The right to access your personal data and receive a copy
• The right to rectify inaccurate data
• The right to request deletion of your data (subject to legal retention obligations)
• The right to restrict processing in certain circumstances
• The right to data portability (in a structured, machine-readable format)
• The right to object to processing based on legitimate interests
• The right to withdraw consent at any time (without affecting prior processing)
• The right to lodge a complaint with the Office of the PDPC

To exercise any of these rights, please write to [email protected]. We will respond within 30 days.

10. Third-party links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their policies independently.

11. Children's privacy

Nakara Finance programmes are designed for adults aged 40 and older. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time. We will post the revised policy on this page with a new effective date. If changes materially affect how we process your data, we will notify registered participants by email before the changes take effect.

13. Contact

Data controller: Nakara Finance
Address: 164 Surawong Road, Suriyawong, Bangkok 10500, Thailand
Privacy enquiries: [email protected]