Privacy Policy

Vaultline ("we", "our", or "us") is committed to handling personal information with care and transparency. We operate educational workshops and document-organisation resources from 92 Sathorn Road, Thung Maha Mek, Bangkok 10120, Thailand.

This Privacy Policy describes the personal data we may collect when you visit our website, enquire about our workshops, or participate in our sessions — and how we use, store, and protect that data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA).

If you have any questions about this policy, please contact us at [email protected].

We collect personal data only when necessary and only through the means described below.

2.1 Information You Provide Directly

• Contact form submissions: name, email address, phone number (optional), and the message content you submit.
• Workshop enrolment: name, contact details, and any relevant scheduling preferences.
• Membership registration: name, email address, and payment reference details.

2.2 Automatically Collected Data

• Usage data: pages visited, time on site, referral source, and device/browser type — collected through analytics tools.
• Cookies: small text files stored in your browser to support site functionality and measure usage. See our Cookie Policy for full details.

2.3 Legal Basis for Processing

• Consent: where you have agreed to us contacting you or placing non-essential cookies.
• Contractual necessity: to deliver workshop sessions you have registered for.
• Legitimate interests: to maintain site security, improve our educational resources, and respond to enquiries.

2.4 Data Retention

• Contact enquiry records: up to 24 months from last interaction.
• Workshop participant records: up to 36 months from the session date.
• Membership records: for the duration of membership plus 36 months.
• Analytics data: aggregated and anonymised after 14 months.

We use the personal data collected for the following purposes:

• To respond to enquiries submitted through our contact form.
• To confirm workshop registrations and send session-related information.
• To administer Ordered Records Membership accounts and distribute resources.
• To send relevant updates about workshops or educational materials — where you have opted in.
• To analyse website usage patterns and improve our content (using anonymised or aggregated data).
• To maintain records as required by Thai law and for legitimate administrative purposes.

We do not use your personal data to make automated decisions that materially affect you, and we do not engage in profiling for marketing purposes without your explicit consent.

3.1 Data Sharing

We do not sell personal data to third parties. We may share data with:

• Service providers: hosting, email delivery, and analytics partners who process data strictly on our behalf and under contractual obligations.
• Regulatory authorities: where required by Thai law or a legitimate legal obligation.

All third-party processors we engage are bound by data processing agreements consistent with PDPA requirements.

• Encrypted transmission: our website uses HTTPS/TLS to protect data in transit.
• Access controls: personal data is accessible only to staff members with a genuine need to process it.
• Secure storage: data is held on servers with appropriate physical and logical security measures.
• Regular reviews: we periodically review our security practices and update them as needed.
• Breach response: in the event of a data breach affecting your rights, we will notify you and the relevant Thai authority within the timeframe required by the PDPA.

We use cookies and similar browser-based technologies to support website functionality and understand how visitors engage with our content. The categories we use include:

• Essential cookies: required for the site to function correctly; cannot be disabled.
• Analytics cookies: help us understand page usage in aggregate.
• Preference cookies: remember settings such as your cookie consent choice.
• Marketing cookies: used only if you consent, for understanding referral and interest patterns.

You can view and manage your cookie preferences at any time on our Cookie Policy page.

Under Thailand's PDPA and applicable data protection standards, you have the following rights in relation to your personal data:

To exercise any of these rights, please contact us in writing at [email protected]. We will respond within 30 days. You also have the right to raise a concern with Thailand's Personal Data Protection Committee (PDPC).