Privacy Policy

1. Introduction

Roundtable ("we", "us", "our") is committed to handling personal data with care. This policy explains what data we collect when you use our website at https://roundtabl.info or enquire about our workshops, how we use it, and how you can exercise your rights as a data subject.

Roundtable is the data controller for the purposes of this policy. Our registered address is 264 Charoen Nakhon Road, Khlong San, Bangkok 10600, Thailand. Data-related enquiries can be sent to [email protected].

This policy applies to personal data collected through our website contact form, direct email and telephone communication, and information provided during session booking and delivery. It does not cover data processed by third-party websites you may access through links on our site.

2. Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, and telephone number (if provided) when you submit a contact form or enquire by email or telephone.
• Booking information: Programme preferences, session scheduling details, and any relevant context you share during the booking process.
• Session records: Minimal session notes used to ensure continuity across multi-session programmes. These do not include the content of household documents.
• Website usage data: Technical data collected via analytics cookies (if consented), including pages visited and session duration. No personally identifiable information is collected through cookies without consent.

Legal Basis for Processing

• Contact and booking data is processed on the basis of contractual necessity — to respond to your enquiry and arrange the requested session.
• Analytics data is processed on the basis of consent, which you provide via the cookie consent banner.
• Post-session feedback forms are processed on the basis of legitimate interest in improving our programmes.

Retention Periods

Contact and booking data is retained for 24 months from the date of last contact. Session records are retained for 12 months following the conclusion of a programme. Analytics data follows the retention settings of the analytics service used. You may request deletion at any time (see Section 6).

3. How We Use Your Data

• To respond to enquiries and confirm session bookings
• To coordinate scheduling and deliver the programme you have booked
• To send a post-session feedback form (one message per programme)
• To analyse aggregated, anonymised website usage to improve the site's content

We do not use your data for marketing communications unless you explicitly request them. We do not share your data with third parties for commercial purposes. Third-party processors we may use include our website hosting provider and an analytics service (if you have consented to analytics cookies). These processors are contractually required to handle your data only as instructed by us.

Data is stored on servers located within Thailand or within a jurisdiction that provides an adequate level of data protection under applicable Thai law. Where international transfers are necessary, we apply appropriate safeguards.

4. Data Protection Measures

• Website communications are encrypted using HTTPS/TLS.
• Access to stored personal data is limited to staff members whose role requires it.
• Session notes are stored in a password-protected internal system and are not accessible externally.
• In the event of a data breach, we will notify affected individuals and the relevant authority within a reasonable timeframe, in line with the requirements of Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

5. Cookies

Our website uses essential cookies (required for basic site function) and, with your consent, analytics cookies that help us understand how the site is used. A cookie consent banner is displayed on your first visit.

Full details of the cookies we use and how to manage your preferences are available in our Cookie Policy.

6. Your Rights

Under Thailand's Personal Data Protection Act (PDPA B.E. 2562) and to the extent applicable, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interest.
• Right to withdraw consent: Withdraw consent for analytics cookies or other consent-based processing at any time without affecting prior lawful processing.

To exercise any of these rights, write to us at [email protected]. We will respond within 30 days. If you are dissatisfied with our response, you may contact the Office of the Personal Data Protection Committee (PDPC), the supervisory authority in Thailand.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies directly. The presence of a link on our site does not imply endorsement of the linked site's data practices.

8. Children's Privacy

Our services are available to adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, please contact us at [email protected] and we will delete it promptly.

9. Policy Updates

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If changes are material, we will place a brief notice on the website homepage. Continued use of the site following an update constitutes acceptance of the revised policy.