Privacy Policy

1. Introduction

Mendwell ("we", "us" or "our") is committed to respecting and protecting your personal information. This Privacy Policy describes how we collect, use, store and share personal data when you interact with our website or engage with our services. It applies to all visitors, enquirers and participants.

We operate in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). By using this website or contacting us, you acknowledge that you have read and understood this policy.

2. Data Controller

The data controller responsible for your personal data is:

3. Personal Data We Collect

We may collect the following categories of personal data:

• Contact information — name, telephone number, and email address provided when you submit an enquiry form or contact us directly.
• Communication records — messages, notes or correspondence you share with us by email, phone or in person.
• Session participation details — attendance records and scheduling information relating to the services you take part in.
• Usage data — browser type, pages visited, referral source and approximate location, collected automatically via cookies and analytics tools when you visit our website.

We do not collect sensitive personal data (such as health, financial or biometric information) through this website.

4. How We Use Your Data

We use personal data only for the purposes for which it was collected or for closely related purposes, including:

• Responding to your enquiries and arranging sessions or seminars.
• Sending service-related correspondence, schedules and follow-up information.
• Improving our website and understanding how visitors use it.
• Complying with legal obligations under Thai law.
• Sending occasional informational updates about our educational programme, where you have given consent.

We do not use your data for automated decision-making or profiling.

5. Legal Basis for Processing

Under the PDPA, we rely on the following lawful bases to process your personal data:

• Consent — when you submit an enquiry form or opt in to receive updates, you consent to us processing the data provided.
• Contractual necessity — when processing is required to deliver a service you have requested.
• Legitimate interests — for improving our website and services, provided these interests are not overridden by your rights.
• Legal obligation — where Thai law requires us to retain or report certain records.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share it with trusted third parties only where necessary:

• Service providers — such as email hosting and website analytics providers, who process data on our behalf under appropriate data processing agreements.
• Legal authorities — if required to do so by applicable Thai law or a valid legal order.

Any third party with whom we share data is required to handle it with the same level of care as we do.

7. Data Retention

We retain personal data only for as long as is necessary for the purpose for which it was collected, or as required by law. Enquiry and session records are typically retained for no more than three years following last contact, after which they are securely deleted or anonymised.

8. Your Rights Under the PDPA

As a data subject under the PDPA, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct any inaccurate or incomplete data.
• Erasure — request deletion of your personal data where there is no lawful basis to retain it.
• Restriction — ask us to limit how we use your data in certain circumstances.
• Data portability — receive your data in a structured, commonly used format.
• Objection — object to processing based on legitimate interests.
• Withdrawal of consent — withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected] or by telephone. We will respond within 30 days.

9. Cookies

Our website uses cookies to improve your experience and to understand how the site is used. You can manage your cookie preferences through the consent notice displayed when you first visit the site. For full details, please see our Cookie Policy.

10. Security

We take reasonable technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access. Where data is transferred to third-party service providers, we ensure appropriate safeguards are in place. No method of electronic transmission or storage is entirely free from risk, and we cannot offer an absolute guarantee of security.

11. Children's Data

Our website is not directed at children under the age of 20. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "last updated" date. We encourage you to review this policy periodically. Continued use of our website following any changes constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please reach out to us: