Privacy Policy

1. Introduction

Vestapath ("we", "us", "our") is committed to handling personal data responsibly. This Privacy Policy explains what information we collect when you use our website or register for our workshops, how we use it, and what your rights are in relation to it.

Our website is located at https://vestapathd.pro and our workshop venue is at 51 Soi Ari 4, Phaya Thai, Bangkok 10400, Thailand. All personal data processing described in this policy is carried out by Vestapath as the data controller.

If you have any questions after reading this policy, please contact us at [email protected].

2. Data We Collect

Information you provide directly

When you submit an enquiry through our contact form, we collect:

• Your full name
• Your email address
• Your phone number (if provided)
• The content of your message

When you register for a workshop, we collect the above together with your booking details and any accessibility requirements you choose to share.

Information collected automatically

When you visit our website, we may collect standard technical information including your IP address, browser type, pages visited, and time spent on the site. This is collected through cookies and analytics tools. See Section 5 (Cookies) for more detail.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contractual necessity: to process your workshop registration and manage your participation
• Legitimate interest: to respond to enquiries and improve our website and session content
• Consent: for any optional marketing communications, which you may withdraw at any time

Vestapath operates under Thai law (the Personal Data Protection Act B.E. 2562 / PDPA) and, where applicable to international participants, takes note of GDPR principles as a standard of good practice.

4. How We Use Your Data

• To respond to your enquiry or confirm your workshop booking
• To send session reminders and relevant logistical information
• To send you information about future sessions if you have opted in
• To improve our website and session content based on usage patterns
• To comply with applicable legal obligations

We do not sell your personal data to any third party. We do not use your data for profiling or automated decision-making that produces legal or significant effects.

Data sharing

We may share your data with trusted service providers who support our operations (such as email platform providers), under contracts that require them to protect your data in line with this policy. We do not share personal data with third parties for their own marketing purposes.

Data retention

Enquiry data is retained for 12 months from the date of submission. Workshop registration data is retained for 3 years for administrative and accounting purposes, then securely deleted. You may request earlier deletion at any time (see Section 7).

5. Cookies

Our website uses cookies to function and to understand how visitors use it. We use:

• Essential cookies: required for basic site functionality (cannot be disabled)
• Analytics cookies: to understand page visits and site usage (optional)
• Preference cookies: to remember your cookie consent choices (optional)

You can manage your cookie preferences at any time via our Cookie Policy page.

6. Data Security

We take reasonable and appropriate security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Encrypted transmission via HTTPS for all website data
• Access controls limiting who within Vestapath can access personal data
• Regular review of our data handling practices

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals within 72 hours of becoming aware of the breach.

7. Your Rights

You have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate data
• Right to erasure: to request deletion of your personal data where there is no overriding legal reason to retain it
• Right to data portability: to receive your data in a structured, commonly used format
• Right to object: to object to processing based on legitimate interest
• Right to withdraw consent: to withdraw consent for any processing based on consent, at any time
• Right to lodge a complaint: with the Office of the Personal Data Protection Committee (Thailand) or another relevant supervisory authority in your country of residence

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and recommend that you read their privacy policies independently.

9. Children's Privacy

Our workshops and website are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have collected data from a minor, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website or services after an update constitutes acceptance of the revised policy.

11. Contact Us

For any privacy-related queries, requests, or concerns:

• Email: [email protected]
• Address: Vestapath, 51 Soi Ari 4, Phaya Thai, Bangkok 10400, Thailand
• Phone: +66 93 174 8260