Privacy Policy

1. Introduction

Kinwell ("we", "us", "our") is committed to handling personal information with care and transparency. This policy explains what data we collect from people who use our website or services, how we use it, and what rights individuals hold over their own information.

Our services are venue hire, educational courses, and administrative household support — none of which require extensive personal data. We collect only what is needed to arrange and deliver each booking.

This policy applies to all personal data collected through our website at kinwell.cyou and through direct contact (phone, email, in-person). Questions about this policy should be directed to [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact details: name, email address, phone number — collected when you submit a booking enquiry or contact form
• Booking information: preferred dates, number of attendees, service type — collected to arrange sessions
• Correspondence: the content of messages you send us by email or phone
• Website usage data: browser type, pages visited, approximate location — collected via cookies if consent is given

We do not collect sensitive personal data (health, financial, legal, or family relationship information). For the Records Companion service, the assistant works with documents you supply but does not record, copy, or retain any content from those documents.

Legal basis (under Thailand's Personal Data Protection Act B.E. 2562): Contract performance (for service delivery), legitimate interests (for improving our services), and consent (for marketing communications and analytics cookies).

3. How We Use Your Data

• Service delivery: confirming bookings, scheduling visits, sending reminders
• Communication: responding to enquiries, sending booking confirmations
• Service improvement: understanding which services are most used and how the booking process can be simplified
• Legal compliance: retaining records as required under Thai law

We do not use your personal data for automated decision-making or profiling. We do not sell personal data to third parties. We do not send marketing communications unless you have specifically requested them.

4. Data Retention

• Booking enquiries not resulting in a service: deleted within 30 days
• Booking details for completed services: retained for 12 months after the last service date, then deleted
• Course attendance records: retained for 24 months, then deleted
• Financial records (invoices, receipts): retained for 7 years as required by Thai accounting law

5. Data Protection Measures

Personal data is stored in password-protected systems accessible only to Kinwell staff who need it to arrange or deliver services. Our website is served over HTTPS. Staff are informed of their obligations under this policy and under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

In the event of a data breach that poses a risk to individuals, we will notify the Office of the Personal Data Protection Committee (PDPC) within 72 hours where required, and notify affected individuals without undue delay.

6. Cookies

Our website uses cookies to remember your preferences and understand how the site is used. Essential cookies are always active. Analytics and preference cookies are only set if you accept them via the consent banner.

For full details, see our Cookie Policy.

7. Your Rights

Under Thailand's PDPA (Personal Data Protection Act B.E. 2562) you have the following rights regarding your personal data:

• Right to access: request a copy of the personal data we hold about you
• Right to rectification: ask us to correct inaccurate data
• Right to erasure: ask us to delete your data where there is no longer a lawful basis to retain it
• Right to restrict processing: ask us to limit how we use your data in certain circumstances
• Right to data portability: receive your data in a structured, commonly used format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: withdraw consent for any processing based on consent, at any time, without affecting prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's PDPC if you believe we have not handled your data appropriately.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend reading the privacy policy of any external site you visit.

9. Children's Privacy

Kinwell's services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, please contact us and we will delete it promptly.

10. Policy Updates

We may update this policy from time to time. If changes are material, we will update the "Last Updated" date at the top of this page and, where appropriate, notify active clients by email. Continued use of our services after an update constitutes acceptance of the revised policy.

11. Contact

Data controller: Kinwell