Vestara ("we", "our", or "us") operates from 58 Wichit Songkhram Road, Wichit, Phuket 83000, Thailand. This Privacy Policy describes how we handle personal information collected through our website at vestara.cyou and through our general education and document-organisation services. We treat your personal data with care and use it only for the purposes described here.
1. Information We Collect
We may collect the following types of personal information when you use our website or contact us:
- Contact details — your name, email address, and telephone number, submitted via our contact form or provided directly.
- Enquiry content — the topic or question you write in your message to us.
- Usage data — standard technical information such as your IP address, browser type, referring URL, and pages visited, collected automatically when you browse our website.
- Cookie data — small files stored on your device to help the website function correctly. See our Cookie Policy for details.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your enquiries and provide the educational or organisational service you have requested.
- To schedule and confirm appointments for Topic Briefing Sessions or Paperwork Starter Kit walkthroughs.
- To send administrative updates relating to your Knowledge Membership, such as session reminders or resource availability notices.
- To improve the content and usability of our website based on aggregated, non-identifying usage data.
- To comply with any legal obligations that apply to us under Thai law.
We do not use your personal information for automated decision-making, profiling, or targeted advertising.
3. Legal Basis for Processing
We process your personal data on the following grounds:
- Consent — when you submit your contact form or tick the privacy agreement, you give us consent to process your contact details for the purpose of responding to you.
- Contractual necessity — when you purchase or register for a service, we process the information needed to fulfil that arrangement.
- Legitimate interests — we may process technical usage data to maintain a secure and functional website, provided this does not override your privacy rights.
4. Data Retention
We keep contact enquiry records for up to two years from the date of last correspondence, or for as long as needed to provide an active service. Technical log data is retained for a maximum of 12 months. Once data is no longer needed, we delete it securely. If you have a Knowledge Membership, account-related records are retained for the duration of your membership plus one year.
5. Sharing Your Information
We do not sell, rent, or trade your personal information. We may share it in the following limited circumstances:
- Service providers — trusted third-party tools that help us operate (for example, email delivery or website hosting), who are contractually bound to handle data only as directed by us.
- Legal requirements — where we are required to disclose information by applicable Thai law, a court order, or a regulatory authority.
No personal data is transferred to countries outside Thailand unless appropriate safeguards are in place.
6. Your Rights
Under Thailand's Personal Data Protection Act (PDPA) and applicable privacy principles, you have the right to:
- Request access to the personal data we hold about you.
- Ask us to correct any inaccurate or incomplete information.
- Request deletion of your data where there is no longer a lawful reason to retain it.
- Withdraw consent at any time, where consent is the basis for processing.
- Object to processing based on legitimate interests.
- Lodge a complaint with the relevant Thai supervisory authority.
To exercise any of these rights, please contact us at [email protected] or call +66 76 245 813. We aim to respond within 30 days.
7. Cookies
Our website uses cookies to remember your preferences and understand how visitors use the site. You can manage your cookie settings at any time. For full details, please read our Cookie Policy.
8. Security
We use appropriate technical and organisational measures to protect your personal information against accidental loss, unauthorised access, and misuse. Our website is served over HTTPS. Access to personal data is restricted to Vestara staff who need it to carry out their responsibilities.
9. Third-Party Links
Our website may contain links to official public sources such as government information pages or regulatory bodies. We provide these for reference only. We are not responsible for the privacy practices of external websites and encourage you to read their privacy policies separately.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in how we operate or to comply with legal requirements. The "last updated" date at the top of this page will reflect any revisions. We encourage you to review this page periodically.
11. Contact Us
If you have any questions about this Privacy Policy or about how we handle your personal data, please reach out: