Legal

Privacy Policy

Last Updated: 28 March 2026  |  Oryxwell — Chiang Mai, Thailand

Oryxwell ("we," "us," or "our") is committed to handling your personal information responsibly. This policy describes what data we collect, how we use it, and what rights you hold in relation to it. It applies to all interactions with our website and services.

1. Data Controller

The data controller for your personal information is Oryxwell, operating from 78/9 Tha Phae Road, Chang Khlan, Mueang Chiang Mai, Chiang Mai 50100, Thailand. Questions about this policy may be directed to [email protected].

2. Information We Collect

We collect the following categories of personal data:

• Contact information: name, email address, phone number — provided when you submit a contact form or book a session.
• Session-related information: financial and personal details shared voluntarily during educational sessions. This information is used solely to conduct and document the session.
• Usage data: IP address, browser type, pages visited, and time on site — collected automatically via analytics tools when you visit our website.
• Cookie data: preferences and consent records stored in your browser. See our Cookie Policy for full details.

3. Legal Basis for Processing

We process personal data on the following legal grounds:

• Consent: for analytics and marketing cookies, and for receiving promotional communications.
• Legitimate interest: for responding to enquiries, improving our services, and maintaining records necessary for our business.
• Performance of a service: for information necessary to conduct the educational sessions you have engaged us for.

Processing is conducted in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA 2019) and, where applicable to European residents, the General Data Protection Regulation (GDPR).

4. How We Use Your Information

• To respond to enquiries and schedule sessions
• To conduct and document the educational service you have engaged
• To send administrative communications about your booking or session
• To improve our website and service quality using aggregated, anonymised usage data
• To comply with legal and regulatory obligations

We do not sell personal data to any third party. We do not use your data to target advertising.

5. Data Sharing

We share personal data only in the following limited circumstances:

• Service providers: third-party tools used to operate our website or communications (e.g., hosting providers, email services). These are contractually required to handle data securely and only as instructed.
• Legal requirements: where disclosure is required by law, court order, or government authority in Thailand.

Session content — the personal financial information you share during Oryxwell sessions — is never shared outside the organisation under any circumstances.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purpose for which it was collected:

• Contact enquiry records: up to 24 months from last interaction
• Session documentation: retained for the duration of the client relationship and up to 3 years after the last session, unless you request earlier deletion
• Analytics data: anonymised and retained in aggregate form indefinitely; personally identifiable usage data is not retained beyond 14 months

7. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, or loss. These include access controls on internal systems, encrypted storage of contact records, and limited staff access to session documentation. In the event of a data breach that poses risk to your rights, we will notify affected individuals and relevant authorities as required under applicable law.

8. Cookies

Our website uses cookies to function correctly and to understand how visitors use the site. For a full explanation of cookie types, purposes, and your management options, please see our Cookie Policy.

9. Your Rights

Under Thailand's PDPA and applicable international regulations, you have the following rights regarding your personal data:

• Right to access: request confirmation of whether we hold data about you and receive a copy.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your data where there is no overriding legal basis for retention.
• Right to restriction: request that we limit how we use your data in certain circumstances.
• Right to data portability: receive a copy of data you provided in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interest.
• Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are dissatisfied with our response, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

11. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us so we can delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our website or services after a policy change constitutes acceptance of the updated terms.

13. Contact

For questions about this policy or to exercise your data rights, please write to us at [email protected] or by post to: Oryxwell, 78/9 Tha Phae Road, Chang Khlan, Mueang Chiang Mai, Chiang Mai 50100, Thailand.