Privacy Policy

1. Introduction

Latterly ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our services and website. This policy explains what personal data we collect, how we use it, and your rights in connection with it.

This policy applies to all personal data collected through our website at latterlydas.pro, through our session enquiry and registration processes, and through direct correspondence with Latterly.

Our sessions are educational and informational in nature. We do not provide financial or legal advice, and the personal data we collect relates solely to the administration of our educational programmes.

For any privacy-related questions, please contact us at [email protected].

2. Data We Collect

We collect only the personal data necessary to administer our sessions and communicate with enquirers and participants:

• Identification data: name and, where provided, nationality
• Contact data: email address and, where provided, telephone number
• Enquiry content: the content of messages sent through our contact form or by email
• Session participation records: which sessions a participant attended and when
• Website usage data: standard server log data and, where consent is given, analytics data (pages viewed, time on site)
• Cookie data: consent preferences stored locally; see our Cookie Policy for detail

We do not collect financial data, identity document numbers, or any health-related personal data.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to session enquiries and arranging participation
• Administering session registration, payments, and attendance records
• Delivering session materials and follow-up correspondence
• Sending information updates to Extended Literacy Course participants during their enrolment period
• Improving our website and understanding how visitors interact with it (analytics, with consent)
• Meeting legal obligations applicable to a business operating in Thailand

We do not use personal data for marketing to third parties, profiling, or automated decision-making.

4. Legal Basis for Processing

We rely on the following legal bases for processing personal data:

• Contractual necessity: processing required to administer session enrolment and participation
• Legitimate interests: responding to enquiries and maintaining administrative records
• Consent: analytics cookies and optional marketing correspondence (you may withdraw consent at any time)
• Legal obligation: compliance with applicable Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA)

5. Data Retention

We retain personal data only for as long as necessary:

• Enquiry data not resulting in enrolment: deleted after 12 months
• Session participation records: retained for 5 years for administrative and legal purposes
• Financial transaction records: retained for 7 years in accordance with Thai tax law
• Analytics data: retained in aggregated form only; individual data deleted after 26 months

6. Data Sharing

We do not sell, rent, or trade personal data. We may share data in limited circumstances:

• Service providers: third parties who assist with website hosting, email delivery, or payment processing, subject to data processing agreements
• Legal requirements: where we are required by law or court order to disclose data

Any third-party services used (such as analytics providers) are selected for their data protection practices and are bound by appropriate contractual terms.

7. Cookies

We use essential cookies to ensure the website functions correctly, and optional analytics cookies to understand how visitors interact with our pages. Optional cookies are only placed with your consent. For full detail on the cookies we use and how to manage them, please see our Cookie Policy.

8. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These measures include:

• Encrypted data transmission (HTTPS) for all website interactions
• Access restricted to authorised Latterly personnel only
• Regular review of data handling practices

No system is entirely without risk. In the event of a data breach affecting your rights, we will notify you and the relevant authority as required by the Personal Data Protection Act.

9. Your Rights

Under the Personal Data Protection Act B.E. 2562 (Thailand) and, where applicable, the General Data Protection Regulation (GDPR), you have the following rights:

• Access: to request a copy of the personal data we hold about you
• Rectification: to request correction of inaccurate data
• Erasure: to request deletion of your data, subject to legal retention obligations
• Restriction: to request that we limit how we use your data in certain circumstances
• Portability: to receive your data in a structured, machine-readable format
• Objection: to object to processing based on legitimate interests
• Withdrawal of consent: to withdraw consent for analytics cookies or other consent-based processing at any time

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external resources and reading materials. We are not responsible for the privacy practices of any third-party website. We encourage you to review the privacy policies of any external sites you visit.

11. Children

Our sessions are designed for adults and are not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided data to us, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy periodically to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. Material changes will be communicated via a notice on our website. Continued use of our services after any update constitutes acceptance of the revised policy.

13. Contact

For any privacy-related enquiries, to exercise your rights, or to raise a concern:

You also have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand, or with your national data protection authority if you reside in a country with its own supervisory body.