Privacy Policy

1. Introduction

Pensara ("we", "us", "our") is committed to handling your personal information with care and transparency. This policy explains what information we collect when you use our website or attend our sessions, how we use it, and the choices you have.

Pensara is based at 64 Huay Kaew Road, Chang Phueak, Muang, Chiang Mai 50300, Thailand. Our services are educational and organisational in nature, supporting individuals with retirement documentation and records.

If you have any questions about this policy, please contact us at [email protected].

2. Personal Data We Collect

We collect only the information necessary to respond to enquiries and provide our services.

Information you provide directly

• Name and contact details (email address and phone number) submitted via our contact form
• Any message or question you include in the form
• Documents you choose to share during a session (handled with full confidentiality — see below)

Information collected automatically

• Basic analytics data (pages visited, browser type, approximate location) if analytics cookies are accepted
• Cookie consent preferences stored in your browser

Legal basis for processing

We process your personal data on the following grounds under applicable data protection law (including Thailand's Personal Data Protection Act B.E. 2562 — PDPA):

• Consent — for optional cookies and marketing communications
• Legitimate interest — for responding to enquiries you have sent to us
• Contract performance — for delivering sessions you have booked

3. How We Use Your Data

• To respond to your enquiry and communicate with you before and after sessions
• To schedule and deliver the session you have booked
• To understand how our website is used, so we can improve it (analytics cookies only, with consent)
• To comply with legal obligations under Thai law

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not send unsolicited marketing communications. If we ever wish to contact you about future sessions or news, we will ask for your consent first.

Retention periods

Contact form enquiries are kept for up to 12 months. Session booking records are kept for up to 3 years for administrative purposes. Analytics data is retained only for as long as necessary to improve the website. Documents shared during sessions are not retained after the session ends.

4. How We Protect Your Data

• Our website uses HTTPS encryption for all data in transit
• Access to contact form data is restricted to authorised staff only
• Physical documents shared during sessions are handled in private settings and not copied or retained
• In the event of a data breach, we will notify affected individuals and the relevant supervisory authority as required by the PDPA

5. Cookies

Our website uses cookies. Essential cookies are necessary for the site to work. Optional cookies (analytics, preferences) are only placed with your consent, which you can give or withdraw at any time using the cookie banner or our Cookie Policy page.

6. Your Rights

Under Thailand's PDPA and, where applicable, other data protection frameworks (including the GDPR for EEA residents), you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data where there is no longer a lawful basis for holding it
• Restrict or object to our processing of your data
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time for processing based on consent
• Lodge a complaint with the relevant supervisory authority

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. Complaints may be submitted to the Office of the Personal Data Protection Committee (Thailand) or, for EEA residents, the supervisory authority in your country of residence.

7. Third-Party Links

Our website may contain links to external sites, including government bodies and official information resources. We are not responsible for the privacy practices of those sites and encourage you to read their policies before providing any personal information to them.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted information through our website, please contact us at [email protected] and we will remove it promptly.

9. Changes to This Policy

We may update this policy from time to time. Where changes are significant, we will update the "Last Updated" date at the top of this page. Continued use of our website following any changes constitutes acceptance of the revised policy. We recommend reviewing this page periodically.

10. Contact for Data Enquiries

For any questions or requests relating to this privacy policy or the data we hold about you: