Legal
Privacy Policy
Last updated: 10 June 2025
This policy explains how Kinfold (operated as a sole proprietorship at 214 Thanon Naresuan, Tha Wang, Mueang Phra Nakhon Si Ayutthaya, Ayutthaya 13000, Thailand) collects, uses, and protects personal information in connection with our family communication and records organisation services. Questions about this policy can be sent to [email protected].
1. What information we collect
Information you provide directly
When you contact us or enrol in a service, we collect:
- Full name and email address (required for all service enquiries)
- Phone number (optional, if provided on the contact form)
- Message content submitted through our website contact form
- Household details relevant to onboarding (for Co-Parenting Coordination Tools)
- Attendance records for information sessions and support group participation
Information collected automatically
Our website may collect standard web server log data (IP address, browser type, pages visited, timestamps). We use this information only for maintaining site security and improving page performance. If analytics cookies are enabled, aggregated usage patterns may be collected via third-party analytics tools.
2. How we use your information
We use personal information to:
- Respond to enquiries and schedule services you have requested
- Deliver the service you have enrolled in (tool setup, session scheduling, group registration)
- Send essential service-related communications (appointment reminders, session notes)
- Maintain records necessary for service continuity (e.g. session summaries)
- Comply with applicable Thai law and our legal obligations
We do not use personal information for unsolicited marketing communications. We do not sell, rent, or trade personal information to third parties.
Legal basis for processing (Thailand PDPA)
Kinfold processes personal data under Thailand's Personal Data Protection Act B.E. 2562 (2019). The primary legal bases are: your consent (where given via our contact form), performance of a contract (for enrolled service participants), and our legitimate interest in operating and improving our services.
3. Data retention
We retain personal data only as long as necessary for the purposes described in this policy:
- Enquiry data (contact form submissions not resulting in a service): deleted after 12 months
- Service participant records: retained for 3 years after the end of your last service period
- Financial records (payments): retained for 7 years in accordance with Thai accounting law
- Website log data: overwritten or deleted after 90 days
You may request early deletion at any time (see Section 6).
4. Data sharing
We do not share your personal information with third parties except in the following limited circumstances:
- Service providers who assist us in operating our website (hosting, email delivery) — bound by confidentiality agreements
- Where required by Thai law, court order, or government authority
- With your explicit prior consent
We do not use your data for advertising or share it with advertising networks.
5. Data security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, or loss. These include:
- HTTPS encryption for all data transmitted through our website
- Access controls limiting internal access to personal data on a need-to-know basis
- Secure storage of participation records with restricted access
- Regular review of data handling practices
In the event of a data breach that poses a risk to individuals, we will notify affected parties and, where required, relevant authorities in accordance with the PDPA.
6. Your rights under Thailand's PDPA
As a data subject under the Personal Data Protection Act, you have the following rights:
- Right to access: Request a copy of the personal data we hold about you
- Right to rectification: Ask us to correct inaccurate or incomplete information
- Right to erasure: Request deletion of your personal data (subject to legal retention requirements)
- Right to data portability: Request your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interest
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
- Right to lodge a complaint: File a complaint with Thailand's Personal Data Protection Committee (PDPC)
To exercise any of these rights, email [email protected]. We will respond within 30 days.
7. Cookies
Our website uses cookies for essential functionality and, with your consent, for analytics purposes. For a full explanation of the cookies we use and how to manage your preferences, please see our Cookie Policy.
8. Third-party links
Our website may contain links to external websites or resources. Kinfold is not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site you visit.
9. Children's privacy
Our services are intended for adults (18 years and over). We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided personal information to us, please contact us at [email protected] and we will arrange deletion.
10. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. For significant changes, we will attempt to notify active service participants by email. Continued use of our services after a policy update constitutes acceptance of the revised terms.
11. Contact
Data controller: Kinfold
Address: 214 Thanon Naresuan, Tha Wang, Mueang Phra Nakhon Si Ayutthaya, Ayutthaya 13000, Thailand
Privacy enquiries: [email protected]
Phone: +66 35 271 6840