Privacy Policy

1. Introduction

Vestara ("we", "us", "our") is committed to protecting the personal data of individuals who enquire about, register for, or attend our financial education programmes. This Privacy Policy explains what data we collect, how we use it, and what rights you have in relation to it.

This policy applies to individuals based in Thailand and is aligned with Thailand's Personal Data Protection Act (PDPA) B.E. 2562 (2019). Our contact for data-related enquiries is privacy@vestaraes.

2. Data We Collect

We collect the following categories of personal data:

Contact information: name, email address, and telephone number, collected when you submit an enquiry or register for a programme.

Programme participation data: attendance records and any notes you share during sessions, recorded only with your consent and held in confidence.

Website usage data: IP address, browser type, pages visited, and session duration, collected automatically via cookies and analytics tools when you visit our website.

We do not collect sensitive personal data (such as financial account details, national ID numbers, or health data) in connection with our educational services.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

Responding to enquiries: to reply to messages submitted through our contact form or by telephone (legal basis: legitimate interest).

Programme administration: to manage registrations, issue confirmations, and maintain attendance records (legal basis: contract performance).

Communication: to send programme-related information and, where you have consented, updates about future programmes (legal basis: consent).

Website improvement: to understand how our website is used and improve its content and navigation (legal basis: legitimate interest).

Data is retained for a maximum of three years from the date of collection, after which it is securely deleted, unless a longer retention period is required by law.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with the following categories of service provider strictly for operational purposes:

Website hosting and email services: providers who host our website and deliver email communications on our behalf, bound by confidentiality obligations.

Analytics providers: we may use analytics services (such as Google Analytics) to understand website usage. These tools may set cookies on your device. See our Cookie Policy for details.

We will disclose personal data to authorities if required to do so by law or in response to a lawful request from a competent authority in Thailand.

5. Data Protection

We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, or destruction. These include access controls limiting who within our organisation can view personal data, secure storage for physical records, and encrypted transmission of data via our website.

In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the relevant authority as required under Thai PDPA provisions.

6. Cookies

Our website uses cookies. These include essential cookies required for the site to function, and optional analytics and preference cookies that you may accept or decline. For a full explanation, please see our Cookie Policy.

7. Your Rights

Under Thailand's PDPA, you have the following rights in relation to your personal data held by us:

Right of access: to request a copy of the personal data we hold about you.

Right to rectification: to request correction of inaccurate or incomplete data.

Right to erasure: to request deletion of your personal data in certain circumstances.

Right to portability: to receive your data in a commonly used format where technically feasible.

Right to object: to object to processing based on legitimate interest.

Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@vestaraes. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

9. Children's Privacy

Our programmes and website are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated "Last Updated" date. Continued use of our website or services after a change constitutes acceptance of the updated policy.

11. Contact Information

Data Controller: Vestara

Address: 42 Charoen Krung Soi 36, Bang Rak, Bangkok 10500, Thailand

Email: privacy@vestaraes

Phone: +66 2 237 5194