Privacy Policy

1. Introduction

Provora ("we", "us", "our") is committed to handling personal information responsibly and in accordance with applicable Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA). This policy describes the personal data we collect, why we collect it, how we use it, and the choices available to you.

This policy applies to personal data collected through our website, contact forms, workshop bookings, and membership sign-ups in connection with our educational resources — the Planning Notebook & Walkthrough, Question Library Membership, and Family & Carer Workshop.

Questions about this policy may be directed to [email protected].

2. Data We Collect

We collect only the personal data necessary to provide and improve our services:

• Contact details: name, email address, and phone number (when provided via the enquiry form).
• Workshop registration information: name, contact details, and household size for booking purposes.
• Library membership information: name and email address used to create and manage membership access.
• Communications: the content of messages sent to us via email or the website contact form.
• Website usage data: pages visited, time spent, and referral source, collected via analytics cookies (where consented).

We do not collect financial account details, tax identification numbers, or sensitive categories of personal data.

3. How We Use Personal Data

Personal data is used for the following purposes, with the corresponding legal basis under the PDPA:

• Responding to enquiries (legitimate interest) — to answer questions and provide information about our resources.
• Processing bookings and memberships (performance of a contract) — to fulfil orders for notebooks, library access, and workshop places.
• Service communications (contract / legitimate interest) — to send confirmation messages, library update notifications, and post-workshop materials.
• Website improvement (consent) — to understand how the website is used and improve its content and navigation.

We do not use personal data for automated decision-making or profiling.

4. Data Retention

We retain personal data only for as long as necessary:

• Enquiry records: 12 months from last contact, unless a service relationship begins.
• Workshop and membership records: 3 years from the end of the relevant service.
• Financial transaction records: 7 years as required by Thai accounting law.
• Website analytics data: up to 26 months (standard analytics retention).

5. Data Sharing

We do not sell personal data. We share data only in the following limited circumstances:

• Service providers: third-party tools used to manage bookings, send emails, or host our website, under data processing agreements.
• Analytics: anonymised usage data shared with web analytics providers where you have consented to analytics cookies.
• Legal requirements: where required by Thai law or a lawful request from a public authority.

6. Data Security

We take reasonable steps to protect personal data from loss, misuse, and unauthorised access, including:

• HTTPS encryption for data transmitted via our website.
• Access controls limiting who within our organisation can view personal data.
• Use of reputable, security-reviewed third-party service providers.

In the event of a personal data breach that poses a risk to data subjects, we will notify the Personal Data Protection Committee (PDPC) and affected individuals as required under the PDPA.

7. Cookies

Our website uses cookies. Essential cookies are necessary for the site to function. Optional cookies (analytics, preferences) are only placed with your consent. Full details are available in our Cookie Policy.

8. Your Rights

Under the Personal Data Protection Act B.E. 2562, you have the following rights regarding personal data we hold about you:

• Right to access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate data.
• Right to erasure — to request deletion of your data where there is no longer a lawful basis for processing it.
• Right to portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interest.
• Right to withdraw consent — to withdraw consent at any time for processing based on consent, without affecting the lawfulness of prior processing.
• Right to complain — to lodge a complaint with the Personal Data Protection Committee (PDPC) if you believe your rights have not been respected.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website and question library may include links to external websites, including official Thai government and regulatory sources. We are not responsible for the privacy practices of those sites and encourage you to review their own privacy policies.

10. Children's Privacy

Our resources are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently done so, please contact us and we will delete the information promptly.

11. Changes to This Policy

We may update this policy from time to time. The date at the top of the page reflects the most recent revision. Where changes are material, we will notify active members by email. Continued use of our website or services after an update constitutes acceptance of the revised policy.