Privacy Policy

1. Introduction

Calmara ("we", "us", "our") is committed to handling your personal data with care and transparency. This policy explains what data we collect, why we collect it, how we use it and what rights you have in relation to it. Calmara operates from 52 Surasak Road, Si Racha, Chonburi 20110, Thailand.

If you have questions about this policy or about how your data is handled, please write to us at [email protected].

2. Data We Collect

We may collect the following categories of personal data when you contact us, complete our contact form or attend one of our community seminars:

• Full name
• Email address
• Phone number (if provided)
• Organisation name (for employer enquiries)
• Message content submitted via our contact form
• Technical data collected automatically: IP address, browser type, pages visited, time of visit (via analytics cookies, if consented)

We do not collect sensitive personal data such as financial account details, health information, national identification numbers or passport information through this website or as part of our standard service delivery.

3. Legal Basis for Processing

We process your personal data on the following legal bases under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and relevant international frameworks where applicable:

• Consent — for optional analytics cookies and marketing communications, where you have explicitly agreed
• Legitimate interest — for responding to enquiries and maintaining basic website security logs
• Contract — for managing the delivery of purchased offerings (toolkit, advisory sessions, seminars)

4. How We Use Your Data

• Responding to contact form enquiries and email correspondence
• Arranging and delivering purchased offerings
• Sending requested materials (e.g., the self-assessment toolkit after purchase)
• Improving our website based on aggregate, anonymised analytics data
• Maintaining internal records for legitimate operational purposes

We do not use your personal data for automated decision-making or profiling. We do not sell your data to third parties or pass it to third parties for their own marketing purposes.

5. Data Retention

Contact enquiry records are retained for up to 24 months unless a continuing engagement requires longer retention. Purchase records are retained for 7 years in compliance with Thai accounting and tax requirements. Analytics data (if cookies are accepted) is retained for up to 13 months.

6. Data Sharing

Your data may be shared with the following categories of third party only where necessary:

• Email and communication service providers (for sending responses)
• Website analytics providers (Google Analytics, if cookies consented — data is anonymised at IP level)
• Payment processors (for purchase transactions — we do not store card details)

All third-party providers used by Calmara are contractually required to process data only for the purposes specified and in accordance with applicable data protection law.

7. Cookies

We use essential cookies necessary for the website to function, and optional analytics and preference cookies which require your consent. For full details, please see our Cookie Policy.

8. Security Measures

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. Our website uses HTTPS encryption. Access to personal data is restricted to team members who require it to perform their functions. In the event of a data breach affecting your rights, we will notify you and the relevant authority within the timeframes required by applicable law.

9. Your Rights

Under Thailand's PDPA and applicable international frameworks, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your data where no legal basis for retention exists
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interest
• Right to withdraw consent — at any time for processing based on consent, without affecting prior processing
• Right to lodge a complaint — with the Personal Data Protection Committee of Thailand (PDPC) or another applicable supervisory authority

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external websites (for example, official Thai government information sources). We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.

11. Children's Privacy

Our website and services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected data from a minor, please contact us so we can delete it promptly.

12. International Data Transfers

Your data is primarily processed in Thailand. Where we use third-party service providers whose infrastructure is located outside Thailand (for example, cloud email services), we ensure adequate protections are in place consistent with PDPA requirements.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by posting the updated policy on this page with a revised "Last Updated" date. Continued use of our services after any update constitutes acceptance of the revised policy.

14. Contact

For all data-related queries:

• Email: [email protected]
• Address: 52 Surasak Road, Si Racha, Chonburi 20110, Thailand
• Phone: +66 91 247 8635