Privacy Policy

1. Introduction

Mekhala Capital ("we", "us", "our") is committed to handling your personal information with care and transparency. This Privacy Policy describes how we collect, use, store, and protect personal data when you interact with our website at mekhalac.live or enrol in our educational programs. It also explains your rights under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and how to exercise them.

For questions relating to this policy, contact us at: [email protected]

2. Data We Collect

We collect the following personal data through our website contact form and course enrolment process:

• Full name
• Email address
• Phone number (if provided voluntarily)
• Message content submitted via the enquiry form
• Usage data collected automatically via cookies (pages visited, browser type, approximate location)

We do not collect sensitive personal data such as health information, financial account details, or identification document numbers.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the PDPA:

• Consent: When you submit a contact form or accept optional cookies, you consent to the processing described in this policy.
• Contractual necessity: When you enrol in a course, processing your contact details is necessary to deliver the service.
• Legitimate interest: We may process limited data to improve the quality and relevance of our educational materials, provided this does not override your privacy rights.

4. How We Use Your Data

• To respond to enquiries submitted via the contact form
• To administer course enrolments and deliver program materials
• To schedule and conduct mentor conversations (15-week program)
• To send relevant updates about programs, where you have consented
• To analyse website usage patterns in aggregate, to improve the site

We do not use your data for profiling, automated decision-making, or targeted advertising.

5. Data Retention

We retain personal data for the following periods:

• Enquiry form submissions: 12 months from the date of submission
• Course learner records: 3 years from the date of course completion
• Cookie consent records: 12 months

After these periods, data is securely deleted or anonymised.

6. Data Sharing

We do not sell your personal data. We do not share your data with insurance companies, financial advisors, or advertising networks. Data may be shared only in the following limited circumstances:

• With technology providers who operate our website infrastructure, bound by data processing agreements
• With analytics services (Google Analytics) under their applicable terms, using anonymised identifiers where possible
• Where required by Thai law or a valid legal order

7. Data Protection

We protect your personal data using the following measures:

• Encrypted data transmission (HTTPS/TLS) across the website
• Access controls limiting who within our team can view personal data
• Secure hosting infrastructure with regular security monitoring
• Internal procedures for reporting and responding to data incidents

8. Cookies

Our website uses cookies to support basic functionality and to understand how the site is used. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Your Rights Under PDPA

As a data subject under Thailand's PDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data (subject to legal retention obligations)
• Withdraw consent at any time (without affecting the lawfulness of prior processing)
• Object to processing based on legitimate interest
• Request data portability in a commonly used format
• Lodge a complaint with Thailand's Personal Data Protection Committee

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may include links to external sites for reference purposes. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

11. Children's Privacy

Our programs are designed for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy periodically. When we do, the "Last updated" date at the top of this page will reflect the change. Continued use of the website after an update constitutes acceptance of the revised policy. For significant changes, we will notify enrolled learners by email.

13. Contact

Data Controller: Mekhala Capital
27 Phaya Thai Road, Thanon Phaya Thai, Ratchathewi, Bangkok 10400, Thailand
Email: [email protected]
Phone: +66 2 473 8296