Privacy Policy

1. Introduction

Zonivas ("we", "us", "our") is a financial education practice based at 14/6 Soi Ari 1, Phahonyothin Road, Samsen Nai, Phaya Thai, Bangkok 10400, Thailand. We are committed to protecting the personal data of every individual who contacts us, enquires about our services, or engages with our website.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you hold in relation to that data. It applies to all information gathered through our website and through direct contact with our team.

If you have any questions about this policy, please contact us at privacy@{{DOMAIN}}.

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, and phone number — provided when you submit a contact form or reach out to us directly.
• Communication content: messages you send us via our contact form or email.
• Website usage data: pages visited, session duration, browser type, and approximate location — collected via cookies and analytics tools when you consent to their use.

We do not collect sensitive personal data (such as financial account details or identity documents) through our website. Any such information shared during an in-person or remote session is handled under a separate confidentiality arrangement.

3. Legal Basis for Processing

We process personal data under the following legal bases in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

• Consent: for analytics and marketing cookies, and for sending optional communications.
• Legitimate interest: for responding to contact form enquiries and maintaining the security of our website.
• Contract performance: for data necessary to deliver the service you have engaged us for.

4. How We Use Your Data

• Responding to your enquiries promptly and accurately
• Confirming and managing service bookings
• Delivering written session summaries and documentation
• Improving our website through aggregate usage analysis
• Complying with applicable legal obligations

We do not use your personal data for automated decision-making or profiling.

5. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with the following third-party service providers where necessary to operate our website and business:

• Web hosting and infrastructure providers
• Analytics services (where consent has been given)
• Email communication platforms

All third-party providers are required to process data only as instructed by us and to maintain appropriate security standards.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Contact form enquiries: up to 12 months from the date of last communication
• Client session records: up to 3 years following the conclusion of the engagement
• Cookie and analytics data: in line with the retention periods specified in our Cookie Policy

After the applicable retention period, data is securely deleted or anonymised.

7. Data Protection Measures

We take the security of your data seriously. Measures in place include:

• Encrypted transmission of data via HTTPS across our website
• Restricted access to client information — limited to team members who require it for their role
• Regular review of data handling practices
• Prompt notification procedures in the event of a data breach

8. Cookies

Our website uses cookies to support functionality and, where you have consented, to understand how visitors use the site. Please see our Cookie Policy for full details, including the types of cookies used and how to manage your preferences.

9. Your Rights Under PDPA

As a data subject under Thailand's PDPA, you have the following rights:

• Right to access: request a copy of the personal data we hold about you
• Right to rectification: ask us to correct inaccurate or incomplete data
• Right to erasure: request deletion of your personal data in certain circumstances
• Right to data portability: request your data in a commonly used electronic format
• Right to object: object to processing based on legitimate interest
• Right to withdraw consent: withdraw consent at any time for consent-based processing
• Right to lodge a complaint: with the Personal Data Protection Committee of Thailand

To exercise any of these rights, contact us at privacy@{{DOMAIN}}. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before submitting any personal data.

11. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that a minor's data has been submitted, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of our website following a policy update constitutes acceptance of the revised policy.

13. Contact

For privacy-related enquiries, contact our data controller at:

• Email: privacy@{{DOMAIN}}
• Address: 14/6 Soi Ari 1, Phahonyothin Road, Samsen Nai, Phaya Thai, Bangkok 10400, Thailand