Privacy Policy

1. Introduction

Sereya ("we", "us", "our") is committed to handling personal information with care and transparency. This policy explains what data we collect from people who use our website or book a session with us, how we use it, and the rights you hold over it.

Sereya operates as an educational and document-organisation service based at 88 Thanon Chomsurang, Nai Mueang, Mueang, Nakhon Ratchasima 30000, Thailand. We are subject to the Thailand Personal Data Protection Act B.E. 2562 (PDPA). If you have questions about this policy, email us at [email protected].

2. Data we collect

We collect personal data when you:

• Submit the contact form on our website (name, email address, phone number if provided, message content)
• Book a session by phone or email (name, contact details, session preferences)
• Visit our website (anonymous usage data via analytics cookies, if you consent)

We do not collect, copy, or retain any information from documents you bring to a session. Session notes are written on paper handed to you at the close of the session — nothing is retained by Sereya.

Legal basis for processing: Enquiry and booking data is processed on the basis of your consent (submitting a form or contacting us) and to carry out a service you have requested. Analytics data is processed only with your consent via the cookie banner. We retain contact and booking data for up to 24 months from the date of last contact, then delete it.

3. How we use your data

• To respond to your enquiry and arrange session bookings
• To send confirmation and follow-up notes related to your session
• To improve our website based on anonymous usage patterns (only if analytics consent is given)
• To comply with any legal obligations that apply to us in Thailand

We do not use your personal data for unsolicited marketing. We do not sell, rent, or share your personal data with third parties for commercial purposes. We will not transfer your data outside Thailand unless we have an appropriate safeguard in place.

4. Data protection measures

• Our website uses HTTPS encryption for all data in transit
• Email and booking records are stored on password-protected systems with access limited to Sereya staff
• Physical session notes are handed to clients at the close of each session; no copies are retained
• In the event of a data breach that is likely to affect your rights, we will notify you and the PDPC within 72 hours of becoming aware of it
• We review our data practices periodically to identify and address any risks

5. Cookies

Our website uses cookies for basic site functionality and, with your consent, for anonymous analytics. You can manage your cookie preferences using the banner that appears when you first visit, or at any time via our Cookie Policy page.

We use the following categories:

• Essential cookies: required for the site to function; always active
• Analytics cookies: anonymous usage data to help us improve the site; optional, requires consent
• Preference cookies: remember your cookie choices; optional

6. Your rights under Thai PDPA

You have the following rights regarding your personal data:

• Right to access: request a copy of the personal data we hold about you
• Right to rectification: ask us to correct inaccurate or incomplete data
• Right to erasure: ask us to delete your data, subject to our legal obligations
• Right to data portability: receive your data in a structured, commonly used format
• Right to object: object to processing based on legitimate interest
• Right to withdraw consent: withdraw any consent you have given at any time, without affecting the lawfulness of prior processing
• Right to lodge a complaint: contact the Office of the Personal Data Protection Committee (PDPC), Thailand, if you believe we have not handled your data correctly

To exercise any of these rights, email [email protected]. We will respond within 30 days.

7. Third-party links

Our website may contain links to external sites (such as government pension information pages). We are not responsible for the privacy practices of those sites. We recommend reading the privacy policy of any external site you visit.

8. Children's privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, contact us at [email protected] and we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If the changes are significant, we will notify active clients by email. Your continued use of the site after changes are posted constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or to exercise your rights:

• Email: [email protected]
• Post: Sereya, 88 Thanon Chomsurang, Nai Mueang, Mueang, Nakhon Ratchasima 30000, Thailand
• Phone: +66 44 271 905 (Mon–Fri 9 am–5 pm)