Legal
Privacy Policy
Last Updated: 16 April 2025 · Effective Date: 16 April 2025
1. Introduction
Mongkol Group ("we", "our", "us") is a financial education business registered and operating in Thailand. Our registered address is 158 Vibhavadi Rangsit Road, Chatuchak, Bangkok 10900. This Privacy Policy explains how we collect, use, store, and protect personal data we receive from people who enquire about or register for our programmes.
We are committed to handling personal data with care and in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and other applicable laws. If you have questions about this policy, please write to [email protected].
2. Data We Collect
We collect personal data only where it is necessary to respond to an enquiry or to administer a programme registration. We do not collect more information than is needed for these purposes.
What We Collect
- Contact information: Full name, email address, and telephone number (where provided) submitted via our enquiry form.
- Programme registration data: Name, contact details, and the programme you are registering for.
- Website usage data: Anonymized information collected via cookies — pages visited, session duration. See Section 5 for details.
How We Collect It
- Via the enquiry form on our website
- Via telephone or email correspondence
- Via cookies and web analytics (see Section 5)
Legal Basis for Processing
- Consent: Where you have submitted a form or agreed to cookie use.
- Contract: Where processing is necessary to deliver a programme you have registered for.
- Legitimate interest: For basic website analytics to improve the quality of our website.
Data Retention
Enquiry data is retained for 12 months from the date of your last contact with us. Programme registration data is retained for three years from the close of the programme, in accordance with Thai tax and record-keeping obligations. Website analytics data is anonymized within 26 months.
3. How We Use Your Data
- To respond to your enquiry about our programmes
- To process and confirm your registration
- To send you information about session times, locations, and materials relevant to a programme you have registered for
- To improve our website based on anonymized usage data
- To comply with legal obligations under Thai law
We do not use your personal data for marketing to third parties. We do not sell personal data. We will not send you unsolicited promotional emails about programmes you have not enquired about unless you have expressly asked to receive programme updates.
4. Data Protection Measures
We take reasonable steps to protect personal data from unauthorized access, disclosure, or loss. These steps include:
- Storing personal data on password-protected systems with access limited to staff who require it for legitimate business purposes
- Using HTTPS encryption for data transmitted via our website
- Not retaining data beyond the periods described in Section 2
- Reviewing our data handling practices at least annually
In the event of a personal data breach that is likely to result in risk to individuals, we will notify the Thai Personal Data Protection Committee and affected individuals as required by the PDPA.
5. Cookies
Our website uses cookies to understand how visitors use it. We use essential cookies (necessary for the site to function), and optional analytics cookies (to understand page visits). We do not use marketing or tracking cookies for advertising purposes.
You may manage your cookie preferences via our Cookie Policy page. Withdrawing consent for optional cookies will not affect your ability to use the site.
6. Data Sharing
We do not sell personal data. We share personal data with third parties only in the following limited circumstances:
- Service providers: Hosting and website service providers who process data on our behalf, under contractual obligations consistent with this policy.
- Legal requirements: Where disclosure is required by Thai law or by lawful order of a Thai court or authority.
We do not transfer personal data outside Thailand except where technically necessary for hosting services. Where such transfers occur, we ensure equivalent data protection standards apply.
7. Your Rights
Under Thailand's PDPA, you have the following rights in relation to personal data we hold about you:
- Right to access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may ask us to correct inaccurate personal data.
- Right to erasure: You may ask us to delete your personal data where there is no longer a legitimate basis for us to hold it.
- Right to data portability: You may request your personal data in a structured, commonly used format.
- Right to object: You may object to processing based on our legitimate interests.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint: You may lodge a complaint with the Thai Personal Data Protection Committee if you believe we have handled your data unlawfully.
To exercise any of these rights, please write to [email protected]. We will respond within 30 days.
8. Third-Party Links
Our website may contain links to external websites, including reading list sources and reference materials. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing personal data to any third-party site.
9. Children's Privacy
Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has submitted personal data to us, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be available on this page, with the date of last update noted at the top. We will notify registered participants of material changes by email where we hold a valid contact address.
11. Contact for Data Enquiries
For any questions about this policy or to exercise your rights, please contact: