Privacy Policy

1. Introduction

Eldercairn ("we", "us", "our") is an educational workshop organisation based at 128 Charoen Prathet Road, Chang Khlan, Chiang Mai 50100, Thailand. We are committed to handling personal data responsibly and transparently. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it.

This policy applies to data collected through our website at eldercairn.blog and through our registration and enquiry processes. If you have questions, you can reach our data point of contact at [email protected].

2. What Personal Data We Collect

We collect the following categories of personal data:

• Contact enquiry data: name, email address, and optionally phone number, collected when you submit the contact form on our website.
• Session registration data: name, email address, and phone number (if provided), collected when you register for a workshop.
• Website usage data: IP address, browser type, pages viewed, and approximate location, collected through analytics cookies when you browse our website (subject to your cookie preferences).
• Correspondence data: content of emails or other messages you send us, retained for the purpose of responding to your enquiry.

We do not collect sensitive personal data (such as financial information, health data, or national identity numbers) through our website or sessions. Workshop sessions are informational only and no individual case details are solicited or recorded.

3. Legal Basis for Processing

We process your personal data under the following legal bases, consistent with Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

• Consent: when you submit the contact form, accept analytics cookies, or register for a session, you give consent to the processing described in this policy.
• Contractual necessity: processing your name and contact details to confirm your session booking and send relevant session information.
• Legitimate interest: improving our website and sessions based on anonymised usage data, maintaining security, and responding to enquiries.

4. How We Use Your Data

Your personal data is used for the following purposes:

• Responding to enquiries submitted through the website contact form
• Confirming workshop registrations and sending session details
• Sending optional follow-up communications relating to upcoming sessions (only where you have indicated interest)
• Improving website content and user experience through anonymised analytics
• Maintaining records required for business administration

We do not use your personal data for automated decision-making, profiling, or targeted advertising.

5. Data Retention

We retain personal data for the following periods:

• Contact enquiry data: 12 months from the date of enquiry, unless a booking follows
• Session registration data: 3 years from the date of the session, for administrative and record-keeping purposes
• Correspondence: 12 months from the last communication
• Website analytics data: 26 months (in aggregate, anonymised form)

After these periods, data is securely deleted or anonymised.

6. Sharing of Personal Data

We do not sell, rent, or share your personal data with third parties for commercial purposes. Data may be shared in the following limited circumstances:

• Service providers: hosting and email service providers who process data on our behalf under data processing agreements
• Analytics: anonymised usage data may be processed by web analytics tools (subject to cookie consent)
• Legal requirement: where required to comply with Thai law or a lawful order from a competent authority

7. Security Measures

We take reasonable steps to protect personal data against unauthorised access, loss, or misuse. These include encrypted data transmission (HTTPS), restricted access to personal data within our organisation, and regular review of our data handling practices. In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authorities in accordance with applicable law.

8. Cookies

Our website uses cookies to remember your preferences and to collect anonymised usage data. You can manage your cookie preferences at any time through our Cookie Policy page. Essential cookies are always active and cannot be disabled as they are necessary for the website to function.

9. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of your data, subject to legal retention obligations
• Right to data portability: to receive your data in a structured, machine-readable format where technically feasible
• Right to object: to object to processing based on legitimate interest
• Right to withdraw consent: to withdraw consent at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint: with the Personal Data Protection Committee (PDPC) if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our reference materials and website may contain links to third-party websites, including Thai government and official agency pages. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy notices independently.

11. Children's Privacy

Our workshops and website are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "last updated" date. Continued use of our website or services after a change constitutes acceptance of the updated policy. For significant changes, we will send a notification to registered participants where possible.

13. Contact and Data Controller

Eldercairn acts as the data controller for personal data collected through this website and our workshop processes.

• Organisation: Eldercairn
• Address: 128 Charoen Prathet Road, Chang Khlan, Chiang Mai 50100, Thailand
• Phone: +66 2 467 3815
• Email: [email protected]