Privacy Policy

1. Introduction

cresstwelals ("we," "our," or "us") is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information from individuals ("you" or "your") who participate in our financial education programs or interact with our website.

This policy applies to all personal data we process in connection with our educational services delivered in Bangkok, Thailand. By enrolling in our programs or using our services, you consent to the practices described in this policy.

For questions about this policy or how we handle your data, contact us at [email protected].

2. Data Controller Information

Company Name: cresstwelals
Address: 18 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand
Email: [email protected]
Phone: +66 2 573 8416

3. Information We Collect

3.1 Information You Provide

When you enroll in our programs or contact us, we collect:

• Name, email address, and phone number
• Billing address and payment information
• Program preferences and educational background
• Financial situations or goals you share during consultations (for wealth planning clients)
• Any other information you voluntarily provide in communications or program materials

3.2 Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and browser type
• Pages visited and time spent on site
• Referring website and search terms used
• Device and operating system information

4. How We Use Your Information

4.1 Program Delivery

We use your information to provide our educational services, including scheduling sessions, sending program materials, processing payments, and communicating about your enrollment.

4.2 Communications

We send program-related updates, schedule changes, and post-program support. With your consent, we may send educational content or information about upcoming programs.

4.3 Website Improvement

We analyze website usage to improve user experience, understand how visitors find us, and optimize our content.

4.4 Legal Compliance

We process data as required by Thai law, including tax reporting and record-keeping obligations for educational services.

5. Legal Basis for Processing

We process your personal data based on:

• Contract Performance: Processing necessary to deliver the educational programs you've enrolled in
• Legitimate Interests: Improving our services, fraud prevention, and internal administration
• Consent: Marketing communications (which you can withdraw at any time)
• Legal Obligation: Compliance with Thai taxation and business record requirements

6. Data Sharing and Disclosure

6.1 Service Providers

We share information with trusted third parties who assist in operating our business:

• Payment processors (for enrollment fees)
• Email service providers (for program communications)
• Cloud storage providers (for secure data backup)
• Analytics services (to understand website usage)

These providers are contractually obligated to protect your data and use it only for specified purposes.

6.2 Legal Requirements

We may disclose information if required by Thai law, court order, or government request, or to protect our rights and safety.

6.3 No Product Referrals

We never sell or share your information with financial product providers or insurance companies. Our educational independence is fundamental to our mission.

7. Data Retention

We retain personal information for:

• Enrollment records: 7 years after program completion (Thai tax law requirement)
• Financial records: 7 years (accounting standards)
• Program materials and feedback: Duration of your post-program support period plus 2 years
• Website analytics: 26 months
• Marketing consents: Until you withdraw consent or we determine the data is no longer needed

8. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encrypted data transmission using SSL/TLS protocols
• Secure cloud storage with access controls
• Regular security assessments and updates
• Employee training on data protection practices
• Limited access to personal data on a need-to-know basis

While we strive to protect your information, no internet transmission is completely secure. We cannot guarantee absolute security but maintain industry-standard protections.

9. Cookies and Tracking

Our website uses cookies to enhance your experience and understand site usage. For detailed information about cookies we use and how to manage them, please see our Cookie Policy.

10. Your Privacy Rights

Under Thai Personal Data Protection Act (PDPA), you have the right to:

• Access: Request a copy of personal data we hold about you
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Data Portability: Receive your data in a structured, commonly used format
• Objection: Object to processing based on legitimate interests
• Restriction: Request we limit how we use your data
• Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise these rights, contact [email protected]. We will respond within 30 days.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies before providing any information.

12. Children's Privacy

Our programs are designed for adults (18 years and older). We do not knowingly collect information from individuals under 18. If we learn we have collected data from someone under 18, we will delete it promptly.

13. International Data Transfers

Your data is stored and processed in Thailand. If we need to transfer data internationally (for example, to cloud service providers with servers outside Thailand), we ensure appropriate safeguards are in place to protect your information in accordance with PDPA requirements.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by email or prominent notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

15. Complaints

If you believe we have not handled your personal data properly, please contact us at [email protected]. We will investigate and respond to your concerns.

You also have the right to lodge a complaint with the Personal Data Protection Commission of Thailand if you believe your rights have been violated.

16. Contact Us

For questions about this Privacy Policy or our data practices, contact:

Data Protection Officer
cresstwelals
18 Ratchadaphisek Road, Din Daeng
Bangkok 10400, Thailand
Email: [email protected]
Phone: +66 2 573 8416