Privacy Policy

1. Introduction

Wisterra ("we", "us", "our") is committed to handling your personal information carefully and transparently. This policy explains what we collect, why we collect it, how it is used, and your rights in relation to it.

Wisterra operates from 38 Prajak Silpakom Road, Mak Khaeng, Udon Thani 41000, Thailand. For questions about this policy, contact us at [email protected].

2. What We Collect

We collect personal data when you contact us, use our services, or visit our website. This may include:

• Your name and contact details (email address, phone number)
• Information you share with us during a Records Mapping session (document types held — not the documents themselves)
• Membership details if you join the Lifelong Learning Membership
• Website usage data via cookies (see our Cookie Policy)

We do not collect sensitive personal data (such as financial account details or government ID numbers) unless you voluntarily share them, and we strongly discourage sharing such information through our general contact channels.

3. How We Use Your Data

We use your information to:

• Respond to enquiries and provide the services you have requested
• Manage your membership and send material updates
• Send service-related communications (confirmations, updates)
• Improve our services based on feedback
• Comply with legal obligations applicable in Thailand

Legal basis: We process your data on the basis of your consent (when submitting a form or enrolling in a service) and legitimate interests (responding to enquiries, maintaining service records).

4. Data Retention

We retain your contact information for up to three years after your last interaction with us, unless you request earlier deletion. Membership records are retained for the duration of your membership plus one year. Data collected for legal compliance purposes is retained as required by applicable law.

5. Data Sharing

We do not sell your personal data. We may share it with:

• Service providers who assist in running our operations (email, website hosting) — under appropriate data processing agreements
• Legal or regulatory authorities if required by Thai law

We do not share your data with third-party marketing organisations.

6. Data Protection Measures

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Our website uses HTTPS. Access to personal data within our team is limited to those who need it to carry out their work. We conduct periodic reviews of our data handling practices.

7. Cookies

Our website uses cookies. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (where no legal obligation requires us to retain it)
• Withdraw consent at any time, where processing is based on consent
• Object to processing based on legitimate interests
• Request data portability

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before sharing any personal information.

10. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently done so, please contact us immediately.

11. Policy Updates

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our services after any change constitutes acceptance of the updated policy.