Privacy Policy

1. Introduction

lotusminast ("we", "us", "our") is committed to handling your personal information with care and transparency. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have in relation to it.

lotusminast is based at 318/4 Nimmanhemin Road, Suthep, Mueang Chiang Mai, Chiang Mai 50200, Thailand. We operate as a financial education provider and are subject to the Thailand Personal Data Protection Act B.E. 2562 (PDPA).

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect personal data only when you provide it to us, or when it is generated through your use of our website. The types of data we may collect include:

• Identity data: your name, as provided through our contact form or workshop registration.
• Contact data: email address, phone number, and any communication records.
• Workshop data: program attendance, materials distributed, and program completion records.
• Website usage data: pages visited, time spent, and browser or device information collected via cookies and analytics tools.

We do not collect sensitive personal data (such as financial account numbers, health information, or identity card numbers) through our website.

3. How We Use Your Data

We use your personal data for the following purposes:

• Responding to your enquiries and providing information about our programs.
• Processing workshop registrations and managing attendance.
• Sending program-related communications (session reminders, materials, follow-up).
• Improving our website and services based on usage patterns.
• Complying with applicable legal obligations under Thai law.

The legal bases for our processing activities are: your consent (where obtained), the performance of a contract (where you have enrolled in a program), and our legitimate interests in operating and improving our educational services.

We do not use your personal data for automated decision-making or profiling.

4. Data Sharing

We do not sell your personal data to third parties. We may share your data in the following limited circumstances:

• Service providers: third parties who assist with website hosting, email delivery, or analytics — under contractual data protection obligations.
• Legal requirements: where disclosure is required by Thai law or by a court order.

Any third parties we engage are required to process your data only for the purposes we specify and in accordance with applicable data protection law.

5. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law.

• Enquiry data: retained for 12 months following your last contact.
• Workshop registration data: retained for 3 years following program completion for administrative purposes.
• Website analytics data: retained for up to 26 months, then aggregated or deleted.

6. Data Protection Measures

We take reasonable steps to protect your personal data against unauthorised access, disclosure, or destruction. These measures include:

• HTTPS encryption for all data transmitted through our website.
• Access controls limiting staff access to personal data to those who need it.
• Secure storage of physical records at our Chiang Mai premises.
• Regular review of our data handling practices.

7. Cookies

Our website uses cookies to improve your browsing experience and to understand how visitors use the site. You can manage cookie preferences through our Cookie Policy page.

Essential cookies are required for the website to function. Optional analytics and marketing cookies require your consent, which you can withdraw at any time.

8. Your Rights

Under the Thailand PDPA, you have the following rights regarding your personal data:

• Right to access: you may request a copy of the personal data we hold about you.
• Right to rectification: you may ask us to correct inaccurate or incomplete data.
• Right to erasure: in certain circumstances, you may ask us to delete your data.
• Right to restrict processing: you may ask us to limit how we use your data.
• Right to data portability: you may request your data in a structured, machine-readable format.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.
• Right to lodge a complaint: you may file a complaint with Thailand's Personal Data Protection Committee (PDPC).

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies independently.

10. Children's Privacy

Our programs and website are intended for adults aged 40 and above. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected data from a minor, please contact us promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of the page. For significant changes, we will provide a more prominent notice where appropriate.

Continued use of our website or services following any update constitutes your acceptance of the revised policy.

12. Contact Information

For any questions, concerns, or requests related to this Privacy Policy or our handling of your personal data, please contact us: