Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by Famora (referred to in this document as "we", "us", or "our") in connection with our website and educational services. It covers information provided by visitors to our website and by households that engage with our programs.

We operate under applicable Thai data protection law and, where relevant, give regard to international privacy standards including the General Data Protection Regulation (GDPR) principles for any participants who may be EU residents.

2. What Information We Collect

We collect the following types of personal information:

• Contact form submissions: name, email address, and optionally phone number and a written message
• Program enrolment: name, contact details, and household information relevant to scheduling
• Website analytics: anonymised data on page visits, browser type, and session duration via analytics tools
• Cookie data: preferences stored locally in your browser (see our Cookie Policy for detail)

We do not collect sensitive personal data (health information, financial records, identification documents) and we do not access the content of any household documents during our administrative sessions — those remain solely in the client's possession.

3. Legal Basis for Processing

We process personal information on the following legal bases:

• Consent: when you submit the contact form or accept cookies
• Legitimate interest: for responding to enquiries and maintaining program records
• Contract performance: when processing information necessary to deliver an enrolled program

4. How We Use Your Information

Personal information collected is used for the following purposes:

• Responding to enquiries submitted through our contact form
• Scheduling and delivering programs you have enrolled in
• Sending program-related communications (session reminders, written summaries)
• Understanding how our website is used so we can improve it
• Complying with applicable legal obligations

We do not use personal information for automated decision-making, profiling, or any form of marketing without your explicit consent.

5. Data Retention

Contact enquiry data is retained for up to 12 months after the last communication. Program enrolment records are retained for up to 3 years for administrative purposes. Website analytics data is held in anonymised form for up to 24 months. You may request deletion of your data at any time (see Section 8).

6. Data Sharing and Third Parties

We do not sell personal data. We may share limited data with the following categories of service providers who assist with our operations:

• Website hosting and infrastructure providers
• Analytics service providers (data is anonymised where possible)
• Email communication tools used to send program correspondence

All third-party providers are required to handle data in a manner consistent with this policy. We do not share personal data with advertisers, data brokers, or unrelated organisations.

7. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, or disclosure. These include:

• HTTPS encryption for all website data transmission
• Restricted access to personal data within our small team
• Secure storage for any physical session notes
• Regular review of data handling practices

No method of transmission over the internet is completely secure. While we apply appropriate safeguards, we cannot guarantee absolute security.

8. Cookies

Our website uses cookies to remember your preferences and understand how the site is used. Essential cookies are required for the site to function. Optional analytics and preference cookies are only set with your consent. Please see our Cookie Policy for full detail.

9. Your Rights

You have the following rights in relation to personal data we hold about you:

• Access: you may request a copy of the information we hold
• Rectification: you may ask us to correct inaccurate information
• Erasure: you may request deletion of your personal data
• Portability: you may request your data in a portable format
• Objection: you may object to processing based on legitimate interest
• Withdrawal of consent: where processing is based on consent, you may withdraw at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our website and direct services are directed at adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it promptly.

11. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies independently.

12. Policy Changes

We may update this policy from time to time. When we do, the "Last Updated" date at the top of this page will change. Significant changes will be communicated via a notice on our website. Continued use of our site following a change constitutes acceptance of the updated policy.

13. Contact for Privacy Matters

For any questions about this policy or how we handle your data: