Privacy Policy

1. Introduction

Goldenleaf ("we," "our," or "us") is committed to protecting the privacy and personal information of individuals who visit our website or use our services. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with Thailand's Personal Data Protection Act (PDPA) and applicable data protection regulations.

By using our website or services, you consent to the practices described in this policy. We encourage you to read this policy carefully to understand our approach to data protection.

Contact for Privacy Inquiries: [email protected]

2. Information We Collect

We collect personal information when you interact with our website, contact us, or use our services. The types of information we collect include:

Personal Identification Information

• Name and contact details (email address, phone number)
• Mailing address if provided for correspondence
• Information shared during tours or inquiries
• Communication preferences

Service-Related Information

• Information provided in contact forms or email inquiries
• Details shared during tour scheduling or Extended Visit arrangements
• Medical or personal information provided for residence arrangements (with explicit consent)
• Emergency contact information for residents

Technical Information

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referral source and navigation patterns

Cookies and Tracking Technologies

We use cookies to improve your browsing experience. For detailed information about our cookie usage, please refer to our Cookie Policy.

3. How We Use Your Information

We use collected information for the following purposes:

Service Provision

• Responding to inquiries and contact form submissions
• Scheduling tours and arranging Extended Visit Programs
• Processing residence applications and arrangements
• Providing ongoing services to residents
• Communicating important information about our services

Website Improvement

• Analyzing website usage to enhance user experience
• Improving website functionality and content
• Troubleshooting technical issues

Communication

• Sending information you've requested
• Following up on inquiries or service interactions
• Providing updates about our services (with your consent)
• Sending administrative communications

Legal Basis for Processing

Under Thailand's PDPA, we process personal data based on: consent (when you submit forms or contact us), contract performance (when providing services), legitimate interests (website analytics and improvement), and legal obligations (compliance with applicable laws).

4. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:

Service Providers

We may share information with trusted third-party service providers who assist us in operating our website and delivering services, including:

• Website hosting and maintenance providers
• Email service providers for communication
• Analytics services to understand website usage
• IT support and security services

These providers are contractually obligated to maintain data confidentiality and use information only for specified purposes.

Legal Requirements

We may disclose personal information when required by law, court order, or governmental authority, or when necessary to protect our rights, property, or safety, or that of our residents and staff.

Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Security

We implement appropriate technical and organizational measures to protect personal information from unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Secure servers with encryption for data transmission
• Access controls limiting information access to authorized personnel
• Regular security assessments and updates
• Staff training on data protection practices
• Secure backup procedures

While we strive to protect your information, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security but maintain reasonable safeguards appropriate to the sensitivity of the information.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specific retention periods include:

• Inquiry Information: Retained for up to 2 years after last contact
• Resident Records: Retained for 7 years after departure for legal and service continuity purposes
• Financial Records: Retained according to Thai accounting and tax requirements
• Website Analytics: Typically retained for 12-24 months

After retention periods expire, personal information is securely deleted or anonymized.

7. Your Rights

Under Thailand's PDPA and applicable data protection laws, you have the following rights regarding your personal information:

To exercise these rights, please contact us at [email protected]. We will respond to requests within 30 days.

8. Children's Privacy

Our services are designed for adults and we do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have collected information from a minor without appropriate consent, we will take steps to delete such information promptly.

9. International Data Transfers

Personal information is primarily stored and processed in Thailand. If we transfer information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by:

• Posting the updated policy on our website with a new "Last Updated" date
• Providing notice through email for material changes (if you have provided an email address)

We encourage you to review this policy periodically to stay informed about how we protect your information.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. Governing Law

This Privacy Policy is governed by the laws of Thailand, including the Personal Data Protection Act B.E. 2562 (2019). Any disputes arising from this policy shall be subject to the exclusive jurisdiction of Thai courts.