01
Who we are
Lotus Advisory is a financial education practice based at 134 Phra Athit Road, Phra Nakhon, Bangkok 10200, Thailand. We operate under Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA), which came into full effect on 1 June 2022. Where participants are residents of the European Union, we also observe the principles of the General Data Protection Regulation (GDPR).
02
What personal data we collect
Data you provide to us
When you enquire about a programme or register to attend, we collect:
- Full name
- Email address
- Telephone number (if provided)
- Any additional information you include in your enquiry message
Data collected automatically
Our website uses cookies and standard web analytics tools to collect non-personal technical information, including pages visited, browser type, and approximate geographic region. No personally identifiable information is included in this data unless you have provided it through a form.
Programme participation
During workshops, participants may share personal financial details as part of the session's exercises. This information is used only within the session and is not recorded by Lotus Advisory.
03
Legal basis for processing
We process your data on the following bases:
- Consent: Where you have provided information through our contact form, you have consented to us using it to respond to your enquiry.
- Contractual necessity: Once you register for a programme, we process your data to fulfil that arrangement.
- Legitimate interest: We may send you information about new programme cycles if you have previously attended, unless you have asked us not to.
04
How we use your data
We use personal data for the following purposes:
- Responding to enquiries and providing programme information
- Processing registrations and confirming participation
- Communicating practical details about sessions you have registered for
- Informing past participants of new programme cycles (you may opt out at any time)
- Improving the content and delivery of our programmes based on feedback
We do not use personal data for automated profiling or for marketing purposes beyond notifying past participants of new programmes.
05
Data sharing
We do not sell, rent, or share personal data with third parties for marketing purposes. We may share data with:
- Technology service providers who host our website and manage email, under data processing agreements
- Authorities where required by Thai law
No participant financial information shared during programme sessions is recorded or shared with any third party under any circumstances.
06
Data retention
We retain enquiry data for twelve months after the last communication. Participant registration data is retained for three years following the programme, for accounting and administrative purposes, then securely deleted. You may request earlier deletion (see Section 08).
07
Cookies
Our website uses essential cookies necessary for basic functionality. Optional analytics cookies are used only with your consent, which you can manage through our cookie banner or our Cookie Policy page.
08
Your rights
Under the Thai PDPA and, where applicable, GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing for direct marketing purposes
- Withdraw consent at any time (without affecting processing that occurred before withdrawal)
- Lodge a complaint with the relevant supervisory authority (in Thailand: the Office of the Personal Data Protection Committee)
To exercise any of these rights, write to [email protected]. We will respond within thirty days.
09
Data security
We store data with reputable cloud service providers and use standard security measures including encrypted connections. Access to personal data is restricted to staff who require it for their role. In the event of a data breach that affects your rights, we will notify you without undue delay.
10
Third-party links
Our website may link to external resources. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies before providing personal data.
11
Children's privacy
Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data through our site, please contact us and we will delete it promptly.
12
Changes to this policy
We may update this policy periodically. Material changes will be notified by email to registered participants. The current version is always available on this page, with the date of the most recent revision at the top.
13
Contact us about this policy
For any questions or requests relating to this policy, write to:
- Email: [email protected]
- Post: Lotus Advisory, 134 Phra Athit Road, Phra Nakhon, Bangkok 10200, Thailand