Mekhala Capital ("we", "us", "our") is committed to protecting the privacy of everyone who visits our website or enquires about our financial education courses. This Privacy Policy describes how we collect and use your information in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
If you have questions, please reach out to us at [email protected] before proceeding.
01 Data We Collect
When you use our website or submit an enquiry, we may collect the following categories of personal information:
-
Contact details — your full name, email address, and telephone number, provided when you complete our contact form.
-
Enquiry content — the message or questions you share with us, including any information you voluntarily include about your circumstances.
-
Technical information — your IP address, browser type, pages visited, and time on site, collected automatically through cookies and server logs.
-
Cookie preferences — your consent choices, stored locally in your browser. See our Cookie Policy for details.
02 Legal Basis for Processing
Under Thailand's PDPA, we process your data on the following grounds:
When you submit an enquiry form, you consent to us contacting you in response. You may withdraw consent at any time.
We process minimal technical data to keep our website secure, functional, and accessible to visitors.
Responding to your enquiry about our courses involves handling the information you provide so we can assist you effectively.
On occasion, we may be required to retain or disclose information to comply with applicable Thai law.
03 How We Use Your Information
- To respond to enquiries and provide information about our financial education courses.
- To schedule and manage course enrolments when you choose to join a programme.
- To send follow-up communications related to your enquiry — we do not send unsolicited marketing messages.
- To improve our website based on aggregated, anonymised usage patterns.
- To comply with any legal or regulatory requirements applicable in Thailand.
04 Data Retention
We retain personal information only for as long as is reasonably necessary:
| Data Type | Retention Period |
|---|---|
| Enquiry form submissions | 2 years from last contact |
| Course participant records | 5 years from course completion |
| Website analytics logs | 13 months (rolling) |
| Cookie preferences | 12 months (browser-stored) |
| Financial transaction records | 7 years (Thai law requirement) |
05 Data Sharing
We do not sell your personal information. We share data only in limited circumstances:
-
Service providers — trusted third parties who assist us with email delivery, website hosting, and analytics, bound by appropriate data processing agreements.
-
Legal authorities — where required by Thai law, court order, or regulation.
-
Google Analytics — anonymised, aggregated browsing data to understand site usage. No personally identifiable data is shared.
06 Data Protection Measures
- Our website is served over HTTPS with TLS encryption to protect data in transit.
- Stored data is held on access-controlled servers with regular security reviews.
- Only team members who need your information to respond to your enquiry have access to it.
- In the event of a data breach, we will notify affected individuals and relevant authorities within the timeframes required by Thai PDPA.
07 Cookies
We use cookies to keep our website functional and to understand how it is used. Cookies we place include essential session cookies, optional analytics cookies, and preference cookies. You may manage your cookie choices at any time. For a full explanation, please visit our Cookie Policy.
08 Your Rights Under Thai PDPA
As a data subject under Thailand's Personal Data Protection Act, you have the following rights:
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete information.
Request deletion of your personal data, subject to legal retention obligations.
Object to processing based on legitimate interest or direct marketing.
Receive your data in a structured, machine-readable format.
Withdraw consent at any time without affecting past processing.
To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).
09 Third-Party Links
Our website may occasionally link to external resources for your convenience. We are not responsible for the privacy practices of those websites and encourage you to read their policies separately.
10 Children's Privacy
Our courses and website are intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted information through our site, please contact us and we will promptly delete it.
11 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this page periodically.
12 Contact for Privacy Matters
If you have any questions about how we handle your personal information, please reach out. We are glad to help.