Privacy Policy

1. Introduction

Kinora ("we", "us", "our") is an information and communication support service for families, based at 56 Loi Kroh Road, Chang Khlan, Muang, Chiang Mai 50100, Thailand. This Privacy Policy explains how we collect, use, store, and protect personal information provided to us by individuals and households who enquire about, book, or attend our sessions and workshops.

We take the privacy of families seriously and handle all personal information with discretion. If you have any questions about this policy, please contact us at [email protected].

2. What Information We Collect

We may collect the following personal information:

• Your name and the names of other household members attending sessions (where provided)
• Your email address
• Your telephone number (where provided)
• Your message content when you use our contact form
• Technical information such as your IP address, browser type, and pages visited (via cookies and analytics tools, where consent is given)

We collect this information through our website contact form, by telephone, and during the course of preparing and delivering our services. We do not collect sensitive personal data (such as financial, health, or legal records) as part of our services.

3. How We Use Your Information

We use your personal information for the following purposes:

• To respond to your enquiry and assess whether our services are appropriate for your household
• To arrange and deliver the session or workshop you have booked
• To prepare printed materials relevant to your session
• To send you any follow-up referral information agreed during a session
• To communicate with you about your booking, including any changes to scheduled sessions
• To improve our website and services (using aggregated, anonymised analytics data where consent is given)

We do not use your personal information for marketing communications without your explicit consent. We do not sell or share your personal information with third parties for commercial purposes.

4. Legal Basis for Processing

We process your personal information on the following legal bases:

• Consent: Where you have provided explicit consent, such as when submitting a contact form or accepting optional cookies.
• Legitimate interests: Where processing is necessary to respond to enquiries, deliver services, or maintain the security of our systems.
• Contractual necessity: Where processing is required to fulfil a booking or service agreement.

5. Data Retention

We retain personal information for as long as is necessary to deliver the service you have requested, and for a reasonable period afterwards for administrative purposes. In most cases, contact and booking information is retained for no longer than twelve months after the date of the last session or contact. Information required for accounting or legal compliance purposes may be retained for longer where required by law in Thailand.

6. Data Protection Measures

We take reasonable technical and organisational steps to protect your personal information against unauthorised access, loss, or disclosure. These measures include:

• Secure storage of digital records with access restricted to authorised team members
• Secure handling of printed session notes and materials
• Website data transmission via HTTPS encryption
• Regular review of our data handling practices

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and any relevant authority as required by applicable law.

7. Cookies

Our website uses cookies to support basic site functionality and, where consent is given, to understand how visitors use our site. For full information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Your Rights

You have the following rights in relation to your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Rectification: You may ask us to correct any inaccurate information.
• Erasure: You may ask us to delete your personal information where there is no legitimate reason for us to continue holding it.
• Data portability: You may ask us to provide your personal information in a structured, commonly used format.
• Objection: You may object to our processing of your personal information for certain purposes.
• Withdrawal of consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external websites operated by third parties. Kinora is not responsible for the privacy practices of those websites and recommends that you review their privacy policies before providing any personal information to them.

10. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal information from individuals under 18 years of age. If you believe a minor has provided us with personal information, please contact us at [email protected] and we will take steps to remove that information.

11. Applicable Law and Jurisdiction

Kinora operates under Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA) which governs the collection, use, and disclosure of personal data in Thailand. Where relevant, we also apply good practice standards from international data protection frameworks. If you have concerns about our handling of your personal information that we have not resolved to your satisfaction, you may contact the relevant Thai regulatory authority.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any significant changes will be noted on this page with a revised "Last updated" date. We encourage you to check this page periodically.