Privacy Policy

1. Introduction

Napa Group ("we", "us", "our") is committed to handling personal information with care and transparency. This Privacy Policy describes what data we collect from participants, enquirers, and website visitors, how we use it, how long we keep it, and what rights you have in relation to it.

We operate under Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA), which governs the collection and processing of personal data in Thailand. Where relevant, we also observe good practice standards from international frameworks.

If you have questions about this policy, please write to us at [email protected].

2. What Personal Data We Collect

We collect only the information necessary to administer our courses and respond to enquiries. This includes:

• Full name (required for course enrolment and correspondence)
• Email address (required for communication)
• Phone number (optional, provided voluntarily)
• Any information you share in the message field of our contact form
• Basic analytics data (page visits, general location by country) collected via cookies with your consent

Legal basis for processing

We process personal data on the following bases:

• Consent — for analytics cookies and marketing communications, where you have given explicit consent
• Contractual necessity — for data required to process a course enrolment or respond to a service enquiry
• Legitimate interest — for basic administrative records, where our interest in maintaining accurate records does not override your rights

Data retention

Enrolment records are kept for a period of three years after the course completion date. Enquiry data from the contact form is retained for twelve months if no enrolment follows. You may request deletion at any time by writing to us.

3. How We Use Your Information

We use personal data solely for purposes directly related to our courses and communication with you. Specifically:

• To respond to enquiries submitted through our contact form
• To process and administer course enrolments
• To send course-related information, schedules, and materials to enrolled participants
• To send information about future courses, only where you have consented to receive it
• To improve our website and courses using aggregated, anonymised analytics data

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. We do not use your data to make automated decisions about you.

4. How We Protect Your Data

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or misuse. These include:

• Secure, password-protected systems for storing contact and enrolment records
• Restricting access to personal data to authorised staff only
• Encrypted email communication where possible
• Regular review of our data handling practices

In the event of a data breach that is likely to result in risk to your rights, we will notify affected individuals without undue delay and report to the relevant authority as required under the PDPA.

5. Cookies

Our website uses cookies to function correctly and, with your consent, to collect anonymised analytics data. We use four categories of cookies: essential (always active), analytics, marketing, and preference cookies. You can manage your cookie preferences at any time via our Cookie Policy page.

6. Your Rights

Under the Personal Data Protection Act B.E. 2562, you have the following rights in relation to your personal data held by Napa Group:

• Right to access — to request a copy of the personal data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your personal data, subject to legal obligations
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — to withdraw consent at any time where processing is based on consent

To exercise any of these rights, please write to [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you have the right to lodge a complaint with the Personal Data Protection Committee of Thailand.

7. Third-Party Links

Our website may include links to external websites for reference. We are not responsible for the privacy practices of those sites and encourage you to read their own privacy policies before providing any personal information.

8. Children's Privacy

Our courses and website are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a person under 18 has submitted personal data to us, please contact us so that we can delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. If changes are significant, we will notify enrolled participants by email. Continued use of our website after changes are posted constitutes acceptance of the revised policy.

10. Contact for Data Enquiries

If you have any questions about how we handle your personal data, or wish to exercise any of your rights, please contact us: