Legal

Privacy Policy

Last updated: April 5, 2026

Lanna Journey is committed to protecting the personal information of everyone who visits our website or enrols in our courses. This policy explains what data we collect, how we use it, and the rights you have under applicable data protection law — including Thailand's Personal Data Protection Act (PDPA) B.E. 2562 and, where relevant, the European Union's General Data Protection Regulation (GDPR).

If you have questions about anything in this policy, please write to us at [email protected].

1. Who We Are

Lanna Journey operates as a financial education provider based at 72 Chang Khlan Road, Chang Khlan, Mueang Chiang Mai, Chiang Mai 50100, Thailand. We are the data controller for the personal information described in this policy.

2. What Personal Data We Collect

We collect personal information in the following ways:

When you contact us or submit an enquiry form:

• Your name and email address (required)
• Your telephone number (optional)
• The content of your message

When you enrol in a course:

• Full name and contact details
• Payment information (processed by our payment provider; we do not store card details)
• Communication preferences

When you use our website:

• IP address and browser type (via analytics cookies, where you have consented)
• Pages visited and time spent on site
• Referring website

3. How We Use Your Data

We use the personal information we collect for the following purposes:

• To respond to enquiries and provide information about our courses
• To process course enrolments and manage your participation
• To send course materials, session links, and instructor communications
• To improve our website and course content based on aggregate usage data
• To fulfil legal and regulatory obligations

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Legal Basis for Processing

• Consent: For marketing communications and analytics cookies, which you may withdraw at any time.
• Contract performance: For processing your enrolment and delivering course services.
• Legitimate interest: For responding to enquiries and improving our services.
• Legal obligation: Where required by Thai law or applicable international regulations.

5. Data Retention

Enquiry data is retained for 24 months from the date of the enquiry. Course participant records are retained for five years following the end of your last enrolment. Payment records are retained as required by Thai tax law (generally seven years). Analytics data is retained in aggregate form only and is not linked to individuals after processing.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. These include encrypted transmission (HTTPS), access controls on staff accounts, and regular review of our data handling practices. In the event of a personal data breach that is likely to affect your rights, we will notify you and the relevant authority in accordance with applicable law.

7. Cookies

Our website uses cookies to support its operation and, where you have consented, to analyse usage. Essential cookies are necessary for the site to function and are always active. Analytics and preference cookies are only set with your consent. For full details, please see our Cookie Policy.

8. Third-Party Services

We may use the following third-party services in operating our website and courses, each of which has its own privacy policy:

• Google Analytics — website usage analysis
• Google Maps — embedded maps on our homepage
• Video conferencing provider — for online course sessions
• Payment processor — for course fee transactions

9. Your Rights

Under the PDPA and, where applicable, the GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your data where we no longer have a lawful basis to hold it.
• Objection: Object to processing based on legitimate interest.
• Data portability: Receive your data in a structured, machine-readable format.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, please email [email protected]. We will respond within 30 days. If you believe we have not handled your data appropriately, you may lodge a complaint with Thailand's Personal Data Protection Committee or, if you are in the EEA, with your national supervisory authority.

10. Children's Privacy

Our services are designed for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we become aware that a minor has submitted personal information to us, we will delete it promptly.

11. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their individual privacy policies.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of our website or services after a change constitutes acceptance of the updated policy.

13. Contact

For all privacy-related enquiries, please contact us at: