Privacy Policy

1. Introduction

Knotwell ("we", "us", "our") is committed to handling the personal data of people who contact us or attend our educational programmes with care, transparency, and in accordance with applicable data protection law.

This policy applies to all personal data we collect through our website at knotwell.biz and through registration for our programmes. It explains what we collect, why we collect it, how long we keep it, and what rights you have in relation to it.

Knotwell operates under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). For questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data in the following circumstances:

• Contact form submissions: name, email address, phone number (optional), and message content.
• Programme registration: name, email address, phone number, and programme selected.
• Feedback forms: satisfaction ratings and written feedback collected after sessions.
• Website analytics: anonymised usage data including pages visited, session duration, and browser type (via analytics cookies, subject to consent).

Legal basis for processing:

• Consent — for marketing communications and analytics cookies.
• Contract performance — for processing registrations and delivering programme access.
• Legitimate interest — for responding to enquiries and maintaining session records.

Retention: Enquiry data is held for 12 months. Registration and participation records are held for 3 years. Analytics data is anonymised and not linked to individuals.

3. How We Use Your Data

• Responding to enquiries submitted through our website contact form.
• Processing programme registrations and providing programme access and materials.
• Sending confirmation and administrative communications related to your session.
• Sending post-session feedback requests (with your consent at registration).
• Improving our website and programmes using anonymised analytics data.
• Complying with legal obligations under Thai law.

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling.

4. Data Sharing

We share personal data only in limited circumstances:

• Service providers: We use third-party tools for email delivery, website hosting, and analytics. These providers process data on our behalf and are bound by data processing agreements.
• Legal requirements: We may disclose data if required by Thai law or in response to valid legal process.

We do not share participant data with other participants or disclose session attendance to third parties without consent.

5. Data Protection

• Website data is transmitted over HTTPS (TLS encryption).
• Access to personal data is restricted to staff members who need it to carry out their role.
• Internal systems are password-protected and access-controlled.
• In the event of a data breach, affected individuals will be notified as required by the PDPA.

6. Cookies

Our website uses cookies for essential site functionality and, with your consent, for analytics purposes. We do not use cookies for advertising or tracking across other websites.

For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

7. Your Rights

Under Thailand's PDPA, you have the following rights in relation to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to legal retention requirements.
• Portability: Request your data in a machine-readable format where applicable.
• Objection: Object to processing based on legitimate interest.
• Withdraw consent: Withdraw consent for marketing or analytics at any time without affecting prior processing.

To exercise any of these rights, contact [email protected]. We will respond within 30 days.

If you believe your data has been handled in a way that does not comply with applicable law, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their policies independently.

9. Children's Privacy

Knotwell's programmes are designed for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have collected data from a minor, please contact us promptly and we will take steps to delete it.

10. Updates to This Policy

We may update this policy from time to time. The date at the top of this page indicates when it was last revised. We will notify registered participants of material changes by email.