Privacy Policy

Introduction

Kapiture Co., Ltd. ("Kapiture", "we", "us", or "our") is committed to handling personal information with care and transparency. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have under applicable law.

This policy applies to all individuals who interact with Kapiture — including program participants, prospective participants who contact us, and visitors to our website. We operate in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

What Personal Data We Collect

We collect personal data only when it is necessary for a legitimate purpose. The types of data we may collect include:

• Identity data: full name, as provided in enrollment or enquiry forms
• Contact data: email address and telephone number
• Program data: notes related to learning progress made during mentorship sessions (for mentorship participants only)
• Payment data: basic billing details for invoice purposes (no card numbers are stored by Kapiture)
• Usage data: anonymized website analytics data collected via cookies (with your consent)

We collect data through our website contact form, direct email correspondence, program enrollment, and session notes (for mentorship programs). We do not purchase personal data lists or acquire personal data from third-party sources.

Legal basis: We process personal data on the basis of consent (for website enquiries and marketing communications), contract performance (for enrolled participants), and legitimate interests (for internal record-keeping and service improvement). Data is retained for a maximum of 3 years from last interaction, or as required by applicable Thai law.

How We Use Your Data

• Responding to enquiries and providing information about programs
• Administering enrollment, scheduling, and program delivery
• Issuing certificates of completion and invoices
• Sending program-related communications (session reminders, materials)
• Collecting and reviewing participant feedback
• Improving our website and program delivery based on usage data

We do not sell personal data. We do not share personal data with third parties for advertising or marketing purposes. Where we use third-party service providers (such as email delivery or cloud storage), those providers operate under data processing agreements and are not permitted to use your data for their own purposes.

How We Protect Your Data

• Data is stored on servers with encryption at rest and in transit
• Access to personal data is restricted to staff who require it for their role
• Internal procedures are reviewed regularly for data security practices
• In the event of a data breach, affected individuals will be notified as required by the PDPA

Cookies

Our website uses cookies to understand how visitors engage with our content. We do not use cookies to serve advertising. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights with respect to your personal data:

• The right to access the personal data we hold about you
• The right to have inaccurate data corrected
• The right to request erasure of your personal data (subject to legal retention requirements)
• The right to withdraw consent at any time, where processing is based on consent
• The right to data portability in a structured, commonly used format
• The right to object to processing for direct marketing purposes
• The right to lodge a complaint with the Personal Data Protection Committee of Thailand

To exercise any of these rights, contact us at privacy@kapiturena. We will respond within 30 days.

Third-Party Links and Services

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external sites you visit.

We use Google Analytics to understand website traffic. Analytics data is anonymized and used only in aggregate form. You can opt out of Google Analytics data collection by adjusting your cookie preferences.

Minimum Age

Kapiture's programs are intended for individuals aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that personal data has been submitted by a minor, it will be deleted.

Updates to This Policy

We may update this Privacy Policy from time to time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify enrolled participants by email. Continued use of our services following an update constitutes acceptance of the revised policy.

Contact for Privacy Matters

For any privacy-related questions, requests to exercise your rights, or concerns about our data practices, please contact: