Privacy Policy
Last Updated: January 2025
Compliant with Thailand PDPAAt Synapbrighton, we actually care about your data. Not just because laws tell us to, but because we'd want the same respect if roles were reversed.
This policy explains how we collect, use, and protect your personal information when you use our event budget planning services. We've tried to keep it readable instead of drowning you in legal jargon.
Who We Are
Synapbrighton operates from Thailand, providing event budget planning education and tools. Our physical address is ถนน ผังเมือง 4 Sateng, Mueang Yala District, Yala 94000, Thailand. You can reach us at +6625842521 or support@synapbrighton.com.
We comply with Thailand's Personal Data Protection Act (PDPA) and follow international best practices where they make sense for protecting user privacy.
What Information We Collect
Look, we only collect what we actually need to provide our services. Here's the breakdown:
Information You Give Us Directly
- Your name and email when you create an account or contact us
- Phone number if you choose to provide it for support purposes
- Budget data and event planning details you enter into our tools
- Payment information when you purchase our learning programs (processed securely through third-party providers)
- Any messages or feedback you send through our contact forms
Information We Collect Automatically
- Basic usage data like which pages you visit and how long you spend there
- Device information including browser type and operating system
- IP address and general location (city level, not your exact address)
- Cookies and similar tracking technologies for session management
Quick Note: We don't sell your data to advertisers or random third parties. That's not our business model and frankly feels wrong.
How We Use Your Information
Everything we collect has a purpose. We use your data to:
- Provide and maintain our event budget planning services and educational content
- Process your enrollment in learning programs scheduled for late 2025 and early 2026
- Send you course materials, updates, and important service notifications
- Respond to your questions and support requests in a timely manner
- Improve our platform based on how people actually use it
- Prevent fraud and maintain security of our systems
- Comply with legal obligations under Thailand law
We won't use your email for spam. If we send marketing messages, you can unsubscribe anytime. Support emails and essential service updates are different though – those we need to send.
Legal Basis for Processing (PDPA Requirements)
Under Thailand's PDPA, we need a valid reason to process your personal data. Here's our legal basis:
- Consent: You've given us explicit permission when signing up or using certain features
- Contract Performance: Processing is necessary to deliver the services you've requested
- Legal Obligation: We're required by Thai law to maintain certain records
- Legitimate Interest: We process some data to improve services and prevent fraud, balanced against your rights
You can withdraw consent anytime, though this might limit what services we can provide.
Who We Share Your Data With
We keep sharing to a minimum. Your information might be shared with:
Service Providers We Trust
- Payment processors who handle transactions securely
- Cloud hosting providers who store our data with strong security measures
- Email service providers who help us communicate with you
- Analytics tools that help us understand site performance (we use privacy-focused options)
All these third parties are bound by contracts to protect your data and can only use it for the specific purposes we've authorized.
Legal Requirements
We'll disclose information if required by Thai law, court orders, or valid government requests. We'll notify you when legally permitted.
International Transfers: Some of our service providers operate outside Thailand. When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
How Long We Keep Your Data
We don't hoard data forever. Here's our retention approach:
Data Type | Retention Period |
---|---|
Account information | Active account duration + 2 years after deletion request |
Budget planning data | While account is active, deleted within 30 days of account closure |
Payment records | 7 years (Thai tax law requirement) |
Support communications | 3 years from last interaction |
Website analytics | 14 months, then anonymized |
Once data reaches its retention limit, we securely delete or anonymize it so it can't be traced back to you.
Your Rights Under Thai Law
Thailand's PDPA gives you several rights over your personal data. You can:
- Access: Request a copy of the personal data we hold about you
- Rectification: Ask us to correct inaccurate or incomplete information
- Erasure: Request deletion of your data (with some legal exceptions)
- Data Portability: Get your data in a machine-readable format to transfer elsewhere
- Object to Processing: Stop us from processing your data for certain purposes
- Restrict Processing: Limit how we use your data in specific circumstances
- Withdraw Consent: Take back permission you've previously given
How to Exercise Your Rights
Send requests to support@synapbrighton.com with "Data Rights Request" in the subject line. Include your registered email and specify which right you want to exercise.
We'll respond within 30 days. If your request is complex, we might need up to 60 days and we'll let you know why.
Right to Complain: If you're unhappy with how we handle your data, you can file a complaint with Thailand's Personal Data Protection Committee. We'd prefer you contact us first so we can try to resolve the issue directly.
How We Protect Your Information
Security isn't just a checkbox for us. We take reasonable measures including:
- Encryption of data in transit (TLS/SSL) and at rest for sensitive information
- Regular security audits and vulnerability assessments
- Access controls limiting who on our team can view personal data
- Secure password requirements and account protection features
- Regular backups stored securely with encryption
- Employee training on data protection and privacy practices
That said, no internet transmission is 100% secure. We do our best, but you should also take reasonable precautions like using strong passwords and not sharing account credentials.
Cookies and Tracking
We use cookies to keep the site working properly and to understand how people use it. Here's what we use:
Essential Cookies
These keep you logged in and remember your preferences. Without them, the site wouldn't function properly. You can't opt out of these if you want to use our services.
Analytics Cookies
These help us understand which pages are useful and which need work. We use privacy-respecting analytics that don't track you across other websites.
Managing Cookies
Most browsers let you control cookies through their settings. Blocking all cookies might break some site features though.
Children's Privacy
Our services are designed for adults planning professional or personal events. We don't knowingly collect data from anyone under 20 years old (Thailand's age of majority).
If we discover we've accidentally collected information from someone underage, we'll delete it promptly. If you're a parent who believes we have your child's data, contact us immediately.
Changes to This Policy
We'll update this policy when needed to reflect changes in our practices or legal requirements. Major changes will be announced through email or a prominent notice on our site.
The "Last Updated" date at the top shows when we last revised this policy. Continued use of our services after changes means you accept the updated terms.
We archive previous versions, so you can request to see what changed if you're curious.
Questions or Concerns?
If something in this policy doesn't make sense or you have questions about your data, reach out to us:
Email: support@synapbrighton.com
Phone: +66 2 584 2521
Mail: ถนน ผังเมือง 4 Sateng, Mueang Yala District, Yala 94000, Thailand
We genuinely want to hear from you if you have privacy concerns. We're people too, and we get that trust matters.