Privacy Policy

1. Introduction

Goldwick ("we", "us", "our") operates a pension information and education service from 12 Loi Kroh Road, Chang Khlan, Chiang Mai 50100, Thailand. We are committed to handling any personal information you share with us carefully and in accordance with applicable data protection principles.

This policy explains what personal data we collect, how we use it, and the choices you have regarding that data. It applies to information collected through our website, via our contact form, and in connection with our education sessions and membership offerings.

If you have any questions about this policy, please contact us at [email protected].

2. Personal Data We Collect

2.1 Information You Provide Directly

• Full name
• Email address
• Phone number (optional)
• Message content submitted via our contact form
• Membership registration details (name, email) for Community Year sign-up

2.2 Information Collected Automatically

• Basic analytics data (pages visited, browser type, approximate location at country level) via cookies — only if you consent
• Cookie consent preferences stored in your browser's localStorage

2.3 Data We Do Not Collect

We do not request, collect, or store any pension account details, financial values, account numbers, or any other personal financial information. Our sessions and workbooks are built around document types and terminology, not individual financial data.

2.4 Legal Basis for Processing

• Consent — for marketing communications and optional analytics cookies
• Contractual necessity — to manage session bookings and membership
• Legitimate interests — to respond to enquiries and improve our services

3. How We Use Your Data

• Responding to enquiries submitted via our contact form
• Organising and confirming session bookings and membership registrations
• Sending relevant information about upcoming sessions or workbook updates, where you have opted in
• Improving the website and session materials through anonymised analytics data (where consent is given)
• Meeting any applicable legal or regulatory obligations

We do not sell, rent, or trade your personal data with any third party for commercial purposes.

3.1 Data Retention

• Enquiry and contact form data: retained for up to 24 months from the date of submission, then deleted
• Session registration records: retained for 36 months, then deleted
• Membership records: retained for the duration of membership plus 12 months
• Analytics data: stored in anonymised aggregate form; no individual-level retention after 12 months

4. Data Protection Measures

• All data submitted via our website is transmitted over HTTPS encryption
• Access to stored personal data is restricted to authorised Goldwick staff only
• Passwords and access credentials are managed using secure, hashed storage
• We review our data handling practices periodically
• In the event of a data breach that is likely to affect your rights or freedoms, we will notify you without undue delay and, where required, inform the relevant supervisory authority

5. Cookies

We use essential cookies to keep the website functioning (for example, remembering your cookie consent choice). We may also use optional analytics cookies to understand how visitors use the site, but only if you give explicit consent via the cookie banner.

For full details about the cookies we use and how to manage them, please read our Cookie Policy.

6. Your Rights

Depending on your location, you may have some or all of the following rights in relation to your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — request deletion of your data, subject to any legal retention requirements
• Right to portability — receive your data in a structured, machine-readable format
• Right to object — object to processing carried out on the basis of legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting lawfulness of prior processing

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days.

If you believe your data rights have been infringed, you may contact the relevant data protection authority in your country of residence. Residents of Thailand may refer to the Personal Data Protection Committee (PDPC) established under Thailand's Personal Data Protection Act B.E. 2562 (2019).

7. Third-Party Links

Our website may contain links to external sites and resources. We are not responsible for the privacy practices of those sites and recommend you review their policies separately before sharing any personal information.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data through our site, please contact us at [email protected] and we will delete it promptly.

9. Updates to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

10. Contact

For any privacy-related enquiries or to exercise your rights:

• Data controller: Goldwick
• Email: [email protected]
• Address: 12 Loi Kroh Road, Chang Khlan, Chiang Mai 50100, Thailand