Privacy Policy

1. Introduction

Threadwell ("we", "us", "our") is committed to handling personal information with care and transparency. This Privacy Policy explains what personal data we collect from visitors to our website and from households who book or attend our sessions, how we use it, and how we keep it safe.

Threadwell is based at 18 Uttarakit Road, Pak Nam, Krabi 81000, Thailand. We operate under Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA). Questions about this policy can be sent to [email protected].

This policy applies to all personal data processed through the Threadwell website and through our session booking and delivery process. It does not apply to third-party websites we may link to.

2. Data We Collect

We collect the following categories of personal data:

• Contact information: full name, email address, and telephone number, collected when you submit an enquiry form on our website or contact us directly.
• Session booking details: the session you enquire about and any scheduling preferences you share with us.
• Website usage data: standard browser and access data collected automatically through analytics tools, including pages visited, time on site, and device type.
• Cookie data: cookie consent preferences stored in your browser's local storage. See our Cookie Policy for full details.

We do not collect sensitive personal data and we do not handle personal documents belonging to household members. During organisational sessions, all documents remain in the control of the household attending.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries — to reply to messages submitted through our contact form and arrange session bookings.
• Session delivery — to send pre-session information notes and confirm booking details.
• Website improvement — to understand how our website is used and identify areas to improve, using anonymised analytics data.
• Legal compliance — to meet our obligations under Thai law and to respond to legitimate requests from public authorities.

Legal basis for processing: consent (for marketing communications and analytics), legitimate interest (for enquiry responses and session delivery), and legal obligation (for record-keeping and compliance). We do not send marketing communications unless you have specifically opted in.

4. Data Retention

We retain personal data only for as long as needed:

• Enquiry contact data: up to 12 months from last contact, unless a session booking is made.
• Session booking records: up to 3 years for accounting and administrative purposes.
• Analytics data: anonymised and retained for up to 26 months through our analytics provider.

5. Data Protection

We take reasonable steps to protect personal data held by Threadwell:

• Website data is transmitted over encrypted HTTPS connections.
• Access to stored personal data is limited to Threadwell team members who need it to respond to enquiries and manage bookings.
• We do not sell or share personal data with third parties for marketing purposes.

In the event of a data breach that poses a risk to individuals, we will notify affected persons and, where required, relevant authorities in accordance with Thai PDPA requirements.

6. Cookies

Our website uses cookies to keep the site functioning and to understand how it is used. You can manage your cookie preferences at any time. Full details are in our Cookie Policy.

7. Your Rights

Under the Personal Data Protection Act B.E. 2562, you have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct inaccurate or incomplete data.
• Right to erasure: to request deletion of your data, subject to our legal obligations.
• Right to data portability: to receive your data in a structured, commonly used format.
• Right to object: to object to processing based on legitimate interests.
• Right to withdraw consent: to withdraw any consent you have given at any time, without affecting prior lawful processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend that you read their privacy policies before submitting any personal data to them.

9. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data through our website, please contact us at [email protected] and we will delete the data promptly.

10. Policy Updates

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website following any update constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions or to exercise your rights:

• Email: [email protected]
• Address: 18 Uttarakit Road, Pak Nam, Krabi 81000, Thailand
• Phone: +66 75 428 193