Privacy Policy

1. Introduction

Open Atrium ("we", "us", "our") is committed to handling personal data with care and transparency. This policy explains what data we collect, how we use it, and the rights you have under applicable Thai data protection law, including the Personal Data Protection Act B.E. 2562 (PDPA).

This policy applies to data collected through our website at openatr.site, through our contact form, and in connection with the services we provide. Questions about this policy can be directed to [email protected].

2. Data We Collect

We collect only what is necessary for the purposes described below:

• Contact information: Name, email address, phone number — provided when you complete the contact form or correspond with us.
• Enquiry and session content: Information you share in enquiries, sessions, or written correspondence about your circumstances.
• Website usage data: Cookies and analytics data (if analytics cookies are accepted). See our Cookie Policy for details.
• Payment information: For programme clients, payment is handled via our billing system. We do not store full card details.

3. Legal Basis for Processing

We process personal data on the following grounds:

• Contractual necessity: To provide the services you engage us for.
• Legitimate interest: To respond to enquiries and maintain service quality.
• Consent: For optional analytics cookies and marketing communications, where you have given explicit consent.
• Legal obligation: Where we are required to retain records by applicable Thai law.

4. How We Use Your Data

• Responding to enquiries and scheduling sessions
• Delivering and administering the services you have engaged
• Sending written session summaries and programme documentation
• Issuing invoices and processing payments
• Improving our website and service quality (analytics, if consented)
• Complying with applicable legal obligations

We do not sell personal data to third parties. We do not use personal data for profiling or automated decision-making.

5. Data Retention

Contact enquiry data is held for up to 24 months from last contact. Session summaries and programme records are held for the duration of the programme and for up to 36 months after its conclusion. Payment records are retained for the period required by Thai tax law (typically 5 years). Website analytics data is held in accordance with our analytics provider's retention settings.

6. Data Security

We store personal data on encrypted systems with access controls limited to Open Atrium staff. Session summaries are transmitted by encrypted email. Physical documents relating to records-organisation visits are returned to clients at the end of each visit — we do not retain copies.

7. Cookies

Our website uses cookies for essential functionality and, with your consent, for analytics purposes. For full details, see our Cookie Policy.

8. Your Rights

Under the Thai PDPA, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to legal retention requirements
• Object to processing based on legitimate interest
• Withdraw consent at any time (for consent-based processing)
• Lodge a complaint with the Personal Data Protection Committee of Thailand

To exercise any right, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Services

We may use third-party services for website hosting, email, analytics, and payment processing. Each provider is selected for its compliance with applicable data protection standards. We do not transfer personal data outside Thailand without appropriate safeguards.

10. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data through our website, please contact us so we can remove it.

11. Links to Third-Party Sites

Our website may link to external resources. We are not responsible for the privacy practices of those sites and encourage you to read their own privacy notices.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by posting a revised version on this page with an updated date. Continued use of our services after a change constitutes acceptance of the revised policy.

13. Contact

Data controller: Open Atrium
Address: 53 Surawong Road, Si Phraya, Bang Rak, Bangkok 10500, Thailand
Email: [email protected]
Phone: +66 2 463 7281