Privacy Policy
Last Updated: 14 May 2025 | Effective: 14 May 2025
oakrootad ("we", "us", "our") is based at 88 Nimmanhaemin Road, Muang, Chiang Mai 50200, Thailand. This policy explains what personal information we collect when you use our website or engage our services, how we use it, and what rights you hold over it. If you have questions, please contact us at [email protected].
1. Information We Collect
We collect personal information only where it is necessary and relevant to providing our services or operating our website.
Information You Provide Directly
- Name and contact details (email address, phone number) when you submit an enquiry form or make a booking
- Brief descriptions of your situation that you share in messages or during sessions
- Any records or documents you bring to a session (handled under strict confidentiality; see Section 6)
Information Collected Automatically
- Standard server log data including IP address, browser type, pages visited, and visit duration
- Cookie data as described in our Cookie Policy
- Analytics data (if cookies are accepted) relating to how the website is used
2. How We Use Your Information
- To respond to enquiries — when you contact us, we use your name and contact details to reply
- To deliver our services — session preparation and follow-up written materials
- To improve our website — anonymised analytics help us understand which content is useful
- To comply with legal obligations — where required under Thai law or applicable regulations
We do not use your personal information for unsolicited marketing without your explicit consent.
3. Legal Basis for Processing
We process your personal information on the following grounds under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable principles:
- Consent — for optional cookies and any marketing communications
- Contract performance — to deliver sessions and programmes you have engaged
- Legitimate interests — for website security, fraud prevention, and service improvement
- Legal obligation — where required by Thai law
4. Data Retention
- Enquiry messages: retained for up to 24 months from last contact
- Session notes and written outputs: retained for up to 36 months, or until you request deletion
- Website analytics data: retained for up to 14 months in aggregate form
- Financial records (invoices): retained for 5 years as required by Thai accounting regulations
5. Data Sharing
We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:
- Service providers — email hosting and website hosting providers who process data on our behalf under data processing agreements
- Analytics — if accepted, anonymised usage data is processed by analytics tools
- Legal requirement — if required by a court order or Thai regulatory authority
6. Confidentiality of Session Content
Information shared in a session — including the nature of your records, personal circumstances, and family situation — is treated as strictly confidential. It is not shared externally for any purpose other than producing the written output materials agreed with you, and is not used for marketing or research. This confidentiality is a core element of how oakrootad operates.
7. Cookies
We use cookies to support basic website functionality and, where consent is given, to understand how the website is used. Full details are set out in our Cookie Policy.
8. Your Rights
Under Thailand's PDPA and applicable data protection principles, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data (subject to legal retention obligations)
- Withdraw consent for processing based on consent
- Object to processing based on legitimate interests
- Request restriction of processing in certain circumstances
- Lodge a complaint with Thailand's Personal Data Protection Committee
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
9. External Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies separately.
10. Children's Privacy
Our services are directed at adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted personal data to us, please contact us and we will delete it promptly.
11. Data Security
We take reasonable technical and organisational steps to protect your personal information against unauthorised access, loss, or disclosure. These include access controls, secure email practices, and regular review of our data handling procedures. In the event of a data breach that is likely to cause risk to your rights, we will notify you and the relevant authority as required by law.
12. Policy Updates
We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of the website following a material change constitutes acceptance of the updated policy.
13. Contact
For questions, requests, or concerns about this policy or how your data is handled, please contact us:
- Email: [email protected]
- Post: oakrootad, 88 Nimmanhaemin Road, Muang, Chiang Mai 50200, Thailand
- Phone: +66 53 904 167