Privacy Policy

1. Introduction

Concordia ("we", "us", "our") is committed to handling personal information with care and in accordance with applicable Thai data protection legislation, including the Personal Data Protection Act B.E. 2562 (PDPA). This policy explains what information we collect, how we use it, how we protect it, and what rights you have in relation to your personal data.

This policy applies to information collected through our website at concordiad.cyou, through our contact forms, and through participation in any of our programmes. If you have questions about this policy, please contact us at [email protected].

2. What Data We Collect

When you contact us through our website or enquire about a programme, we may collect:

• Your name
• Email address
• Phone number (if provided)
• The content of any message you send us

We also collect standard technical data through our website, including IP address, browser type, pages visited and visit duration, gathered through analytics tools. This data is collected in aggregate and is not used to identify individuals.

Legal basis for processing: We process your personal data on the basis of your consent (when you submit a contact form) and on the basis of our legitimate interest in responding to enquiries and managing our educational programmes.

Retention period: Contact enquiry data is retained for up to 24 months from the date of last contact. Analytics data is retained for up to 14 months. You may request earlier deletion at any time.

3. How We Use Your Data

Personal data collected through our website is used for the following purposes:

• Responding to your enquiry or question about a programme
• Providing information about scheduling, fees or programme content you have asked about
• Processing enrolment for a programme where applicable
• Improving our website based on aggregate usage patterns

We do not use your personal data for automated decision-making or profiling. We do not sell your personal data to third parties. We do not use your data for direct marketing without your explicit consent.

4. Data Sharing

We may share data with the following categories of third party where necessary to operate our services:

• Website hosting and email providers — to deliver messages and maintain our website
• Analytics providers — to understand how visitors use our site (data shared in aggregate or anonymised form where possible)

We do not share your personal information with any third party for their own marketing purposes. Any third parties with whom we share data are required to handle it in accordance with applicable data protection law.

5. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data against accidental or unauthorised access, loss, destruction or disclosure. These include:

• Encrypted data transmission via HTTPS on our website
• Access controls limiting who within our organisation can access personal data
• Regular review of our data handling practices

In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and, where required, the relevant supervisory authority as soon as reasonably practicable.

6. Cookies

Our website uses cookies to store your cookie consent preference and to support basic analytics. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

7. Your Rights

Under the Thailand Personal Data Protection Act and other applicable data protection laws, you have the following rights in relation to your personal data:

• Access: You have the right to request a copy of the personal data we hold about you.
• Rectification: You have the right to ask us to correct any inaccurate or incomplete data.
• Erasure: You have the right to request that we delete your personal data, subject to certain conditions.
• Data portability: Where applicable, you have the right to receive your data in a structured, machine-readable format.
• Objection: You have the right to object to our processing of your personal data where we rely on legitimate interest as our legal basis.
• Withdraw consent: Where you have given consent for processing, you may withdraw it at any time. Withdrawal will not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand, the relevant supervisory authority.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external sites you visit.

9. Children's Privacy

Our programmes and website are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Where changes are significant, we will make reasonable efforts to draw them to your attention. Your continued use of our website following the posting of changes constitutes your acceptance of the updated policy.

11. Contact

For any privacy-related questions or to exercise your data rights, please contact:

• Concordia
• 88 Phetkasem Road, Hat Yai, Songkhla 90110, Thailand
• Email: [email protected]
• Phone: +66 76 392 5108