Privacy Policy

Last Updated: September 25th, 2024

At Phuket Meditation Co., Ltd. (“PMC”, “The Phuket Meditation Center”), we genuinely value your privacy and aim to make your experience with us as smooth as possible. We are committed to transparency about how we collect, use, and protect your data. We clearly state the purposes for which we process personal data, aim to limit our data collection to what is necessary for legitimate purposes, and request explicit consent when required. By using our website, you agree to this privacy policy, which safeguards your privacy. For more information on your rights and responsibilities as a user, please refer to our Terms of Use.

In line with the General Data Protection Regulation (GDPR) for the EU, UK GDPR, PIPEDA in Canada, California Consumer Privacy Act (CCPA) in the US, and Australian Privacy Principles (APPs), this policy explains our approach to data collection, usage, and management. By using our website, you agree to this privacy policy, which safeguards your privacy.

Jurisdiction: Please note, any legal matters concerning this policy will be governed by Thai law. Any disputes or claims will be handled under the jurisdiction of Thailand.

1 Data We Collect

At Phuket Meditation Co., Ltd., we collect both personal and non-personal information to provide you with a smooth and secure experience. Below is a breakdown of the types of data we may collect in alignment with applicable laws, including the General Data Protection Regulation (GDPR) for the EU, UK GDPR, PIPEDA in Canada, California Consumer Privacy Act (CCPA) in the US, and Australian Privacy Principles (APPs):

1.1 Personal Information

Identification Data: Your name, email address, phone number, and mailing address.

Booking and Payment Data: This includes event booking details, dates, prices, and securely processed payment information.

Communication Data: Information gathered through emails, phone conversations, or web forms.

User Account Information: If you create an account with us, this includes username and other credentials.

1.2 Non-Personal Information

Technical Data: Your IP address, browser type, device type, operating system, and referring website are automatically collected when you visit our site.

Geographic Data: Your location based on your IP address to help optimize your experience on the website.

Usage Data: Information regarding how you interact with our website, including pages viewed, time spent, and referral sources.

1.3 Cookie Data

At Phuket Meditation Co., Ltd., we use cookies and similar technologies to enhance browsing, track interactions, and improve functionality. These include necessary, performance, analytics, and marketing cookies. We also collect additional browsing data using session cookies (temporary), persistent cookies (stored for longer), and third-party cookies (used for analytics, advertising, or tracking). We honor “Do Not Track” (DNT) settings to prevent tracking when enabled. For more details, please refer to our Cookie Policy.

1.4 Sensitive Information

We do not generally collect sensitive personal data (such as health information) unless explicitly provided by you and only where legally required or authorized.

1.5 How Data is Collected

Direct Collection: When you provide it directly via web forms, bookings, or communications.

Automated Collection: Through your interactions with our website and cookies, as well as server logs that track your activity.
Each type of data is collected with a clear purpose and only used for legitimate reasons, which we outline throughout this policy.

2 How We Use Data

We collect and use your information to make your experience better on our website and to meet legal standards. The legal basis for processing your data varies depending on context and may include consent, contractual necessity, legitimate interest, or compliance with legal obligations. This includes actions we take to provide our services effectively, like communicating with you, handling payments, and improving how our site works. We comply with regional privacy laws to ensure your data is handled transparently and securely.

PMC enters into contracts with third-party companies to provide services, including payments or product provisions. When you engage with these companies, we may share your personal information as necessary to fulfill contractual obligations. These third-party companies handle your data in accordance with their own privacy policies, which we recommend you review.

Service providers assist us in various tasks, such as: (i) verifying your identity or authenticating identification documents, (ii) checking information against public databases, (iii) conducting background or police checks, fraud prevention, and risk assessment, (iv) performing product development, maintenance, and debugging, (v) allowing the provision of PMC services through third-party platforms and software tools (e.g., integration with our APIs), and (vi) providing customer service, advertising, or payment processing services. These providers have restricted access to your information, are contractually obligated to protect your data, and may only use it for the specified purposes aligned with this privacy policy.

2.1 Communication Purposes

With your permission we collect and use your data to communicate with you through various channels, including email, phone, and messaging apps like WhatsApp. This helps us respond to inquiries and provide updates. Below you can find the services we use for communication.

Legal Basis for Data Processing: Consent, as you allow us to communicate through various channels.

Country: The United States of America

Purpose: Managing emails and supporting customer relationships (Gmail)

Data: Full Name, Address and Country, Phone, Email Address, Communication and Email History

Privacy Policy: Google Security and Privacy Center

Country: The United States of America

Purpose: Managing our Contacts

Data: Full Name, Address and Country, Phone, Email, and in case of an event booking, we also note basic booking information (Event Name, Dates and Event Location)

Privacy Policy: Google Security and Privacy Center

Country: The United States of America

Purpose: Facilitating communication with guests via the WhatsApp widget on our website.

Data: Phone number, message content, and any other personal information shared during the conversation.

Privacy Policy: WhatsApp Privacy Policies

Country: The United States of America

Purpose: We use Mailchimp to manage and distribute our newsletters and email marketing campaigns, ensuring effective communication with subscribers and tracking engagement for optimization.

Data: Data collected may include your name, email address, IP address, subscription preferences, and interaction with the emails (such as open rates and clicks), which helps us personalize content and improve the relevance of our communications.

Privacy Policy: Mailchimp Privacy Center

Country: The United States of America

Purpose: We use Instagram to respond to messages and to be able to communicate with you.

Data: Publicly available profile information, Interactions through messages.

Privacy Policy: Instagram Privacy Policies

Country: The United States of America

Purpose: We use the facebook messenger to communicate with our guests and stay in touch.

Data: Publicly available information and messages.

Privacy Policy: Facebook Privacy Policies

2.2 Payment and Booking Information

Your data is processed through third-party services like Stripe to manage payments and financial transactions, ensuring security and compliance with standards. Sharing this data helps us process your transactions securely and efficiently while ensuring compliance with financial regulations. All providers use high-end encryption systems to protect your data.

Legal Basis for Data Processing: Contractual necessity and compliance with financial regulations.

Country: The United States of America

Purpose: Collecting and managing payments we receive through bookings on this website.

Data: Full Name, Address, Phone Number, Email Address, Booking Details and IP Address as well as Encrypted Payment Details

Privacy Policy: Stripe Privacy Center

Country: The United States of America

Purpose: Collecting and managing the database of our booking information

Data: Full Name, Address, Phone Number, Email Address, Booking Details (Event Name, Event Location and Dates, Prices, Booking and Payment IDs)

Privacy Policy: Google Privacy Center

Country: The United States of America

Purpose: Collecting and managing bookings, events and Guests for the purpose of identifying return visitors who can apply for discounts and establish a booking history.

Data: Full Name, Address, Phone Number, Email Address, Booking Details (Event Name, Event Location and Dates, Prices, Booking and Payment IDs), Booking History

Privacy Policy: Google Privacy Center

Country: The United States of America

Purpose: Displaying and managing upcoming and past events on our Google Calendar

Data: Full Name, Email Address, Country, Booking Details (Event Name, Event Location and Dates)

Privacy Policy: Google Privacy Center

Country: Prague, Czech Republic

Purpose: Automation, Transfer of Booking Data to Google Sheets, Google Contacts and Google Calendar

Data: Full Name, Address, Phone Number, Email Address, Booking Details (Event Name, Event Location and Dates, Prices, Booking and Payment IDs), Booking History

Privacy Policy: Make Privacy Notice

2.3 Analytics and Website Optimization

We use analytics services such as Google Analytics to track and analyze website traffic, monitor performance, and optimize the user experience. These services collect data such as pages visited, time spent on the site, and user interactions, helping us identify trends and improve our website’s functionality. The data collected is anonymized where possible, ensuring that your personal information is protected. You can manage or disable these analytics services through your browser settings, although this may affect website usability and features.

Legal Basis for Data Processing: Legitimate interest in improving user experience and website performance.

Country: The United States of America

Purpose: The purpose of using Google Analytics is to track user behavior and website performance, helping improve user experience, optimize content, and analyze traffic sources.

Data: Google Analytics collects data including IP addresses, geographic location, language preferences, device type, operating system, browser details, page views, time spent on pages, bounce rates, navigation paths, traffic sources (such as search engines, direct visits, or referral sites), and specific user actions like button clicks or form submissions. This information helps track user behavior and site performance. While the data is anonymized, Google Analytics does not collect personally identifiable information (PII) directly, in compliance with privacy regulations.

Privacy Policy: Google Privacy Center

2.4 Marketing and Advertising

We may share certain data with third-party services like Facebook, Instagram, and other advertising platforms to create personalized marketing campaigns and advertisements that are relevant to your interests. These platforms may use cookies, pixels, and other technologies to track your interactions with our site and ads, enabling us to provide more targeted content. Sharing this data allows us to tailor our marketing efforts to better suit your interests, ultimately providing you with more relevant content and promotional offers.

Legal Basis for Data Processing: Consent, obtained through marketing preferences and cookie settings.

Country: The United States of America

Purpose: The purpose of using Facebook and Instagram Advertising is to reach targeted audiences, promote services, increase brand awareness, and drive engagement by delivering personalized ads based on user behavior and preferences.

Data: For Facebook and Instagram advertising, the data used includes user ID, location, demographics, interests, browsing behavior, interactions with ads, device information, and preferences.

Privacy Policy: Meta Privacy Center

Country: The United States of America

Purpose: To provide personalized content, analyze performance, and enhance user engagement with videos.

Data: User ID, viewing history, search history, location, device information, interactions with videos, preferences, and browsing behavior.

Privacy Policy: YouTube Privacy Policy

Country: The United States of America

Purpose: To host and share audio content, such as guided meditations, podcasts, or other related audio resources. Soundcloud is used for engaging users through auditory media, tracking listener interaction, and facilitating communication via user comments and feedback on posted content.

Data: Publicly available information, user interactions, comments, and audio content listening preferences.

Soundcloud Privacy Policy

Country: The United States of America

Purpose: To distribute and share playlists and audio content, such as meditation practices and music. Spotify is used to engage users with auditory content, track listener engagement, and offer personalized audio experiences based on user preferences and interactions.

Data: Publicly available information, user interactions, listening history, playlist preferences, and shared audio content.

Spotify Privacy Policies

Country: The United States of America

Purpose: To facilitate professional networking, share content related to our business, and engage with users on a professional platform. LinkedIn is used to promote services, connect with industry professionals, and expand visibility in relevant networks.

Data: Publicly available information, professional profiles, interactions on posts, messages, and shared content.

Linkedin Privacy Policies

Country: The United States of America

Purpose: To distribute and share guided meditations, audio content, and other related services. Bandcamp is used to sell and promote audio materials and maintain customer relationships through purchase records and communications, while providing users with a seamless purchasing experience.

Data: Publicly available information, purchase history, user interactions, email addresses, and payment details.

Bandcamp Privacy Policies

2.5 Hosting and Video Services

We use platforms like YouTube and Vimeo to host and stream video content. These platforms collect various types of information about viewers, such as IP addresses, browsing behaviors, and engagement with the videos (e.g., likes, comments, and shares). Additionally, these platforms use cookies and other tracking technologies to gather analytics for improving services and personalizing content. While we ensure these services are compliant with privacy standards like GDPR and CCPA, users are encouraged to review the privacy policies of these platforms for further details.

Legal Basis for Data Processing: Legitimate interest in providing video content while complying with relevant privacy standards.

Country: The United States of America

Purpose: To host and share video content related to our services and practices, allowing users to engage with our videos, comment, and subscribe. We use YouTube to showcase meditation guides, teachings, and promotional materials, while also tracking engagement metrics like views and interactions to improve our content and outreach.

Data: Publicly available information, video viewing history, comments, likes, user interactions, and subscription details.

Privacy Policy: YouTube Privacy Policy

2.6 YouTube Usage

We may use embedded YouTube videos in the extended data protection mode. YouTube is a service from Google Inc. YouTube makes this extended data protection mode available, ensuring that YouTube saves no cookies with personal data on your computer.

When calling up the website and to embed the video, the IP address is transferred. This address cannot be correlated unless you have logged into YouTube or another Google service prior to accessing the site. As soon as you start playing an embedded video by clicking “Start,” the extended data protection mode means that YouTube only saves cookies on your computer that contain no personally identifiable data. These cookies can be prevented with the relevant browser settings and extensions.

Compliance Note: Embedded YouTube content is managed in accordance with relevant privacy regulations, including GDPR and CCPA. We ensure that the use of such content aligns with our commitment to protecting your personal information.

Legal Basis for Data Processing: Legitimate interest in embedding video content while respecting data protection regulations.

2.7 Compliance and Legal Obligations

We use your personal and non-personal information to comply with legal obligations, including detecting and preventing fraud, spam, security incidents, and other harmful activities. This information helps us conduct security investigations, verify data, and resolve disputes. We process it based on our legitimate interests and legal obligations to protect the site, ensure contract performance, and comply with laws. PMC processes your data for legitimate interests, provided these do not override your fundamental rights and freedoms requiring personal data protection.

3 User Rights and Responsibilities

We are committed to ensuring that you have full control over your personal data. These rights are in accordance with privacy laws such as the GDPR (EU/UK), CCPA (US), PIPEDA (Canada), and APPs (Australia). They empower you to access, manage, and control how your data is handled. Below, we detail your rights and how you can exercise them effectively.

3.1 Right to Access

You have the right to request a copy of the personal data we hold about you. This includes knowing how and why your data is being processed. Upon request, we will provide this information free of charge within a reasonable time frame.

3.2 Right to Rectification

You have the right to correct any inaccuracies or incomplete information we hold about you. If your data changes or is incorrect, you can request its amendment to ensure it remains accurate.

3.3 Right to Erasure (‘Right to be Forgotten’)

You can request the deletion of your personal data in certain circumstances, such as if the data is no longer necessary, or if you withdraw consent. We will respect your request unless there is a legitimate legal reason to retain your data.

3.4 Right to Restrict Processing

You have the right to limit the processing of your data in specific situations, such as contesting the accuracy of the data or objecting to its use. We will only retain the data without processing it until the issue is resolved.

3.5 Right to Data Portability

You can request to transfer your data to another service provider. We will provide it in a commonly used, machine-readable format so it can easily be ported to another platform, service, or controller.

3.6 Right to Object

You may object to the processing of your personal data based on legitimate interests, direct marketing, or profiling. We will stop processing unless we have compelling legitimate grounds or legal reasons.

3.7 Right to Withdraw Consent

If we rely on your consent for processing, you can withdraw your consent at any time, and we will stop processing your data. However, this won’t affect the legality of processing done before the withdrawal.

3.8 Right to Lodge a Complaint

If you believe we are not complying with data protection regulations, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. This applies to GDPR, CCPA, APP, PIPEDA, and other applicable privacy laws.

3.9 Right to Non-Discrimination (CCPA)

This applies specifically to residents of California under the CCPA. You have the right not to be discriminated against for exercising any of your data privacy rights, such as accessing, deleting, or opting out of data sales. This means you will not face penalties, denied services, or receive different levels of service for exercising these rights.

3.10 Right to Data Minimization

We ensure that only data necessary for the specific purposes is collected and processed, aligning with the principles of GDPR and APPs. This helps minimize exposure and risk to your personal data.

3.11 Accessing and Modifying Your Data

If you wish to access or modify your personal data, you can do so by contacting us at info@phuket-meditation.com. We will respond to your request within a reasonable time frame, ensuring that you can effectively exercise your rights.

3.12 User Responsibilities

As a user, you play an important role in protecting your personal data. We encourage you to keep your passwords confidential, avoid sharing them with others, and regularly update them. Please be cautious about the information you share online and ensure your contact details are current. Taking these steps helps safeguard your data and ensures a safer experience with our services. For further details on your responsibilities and our expectations, please refer to our Terms of Use.

3.13 Right to Opt-Out of Data Sales (CCPA)

If you are a California resident, you have the right to opt out of the sale of your personal information. To opt out, please click on the following link: Opt-Out Preferences.

4 Data Sharing with Third Parties

At Phuket Meditation Co., Ltd., we collaborate with reliable third-party providers to ensure smooth service delivery and improve our services, ensuring functionality and compliance with legal requirements. We share your personal information with these parties only when necessary to perform specific services, such as processing payments, conducting advertising campaigns, analyzing website performance, or ensuring legal compliance.

These third parties may include platforms like Mailchimp, Google Analytics, Stripe, Facebook, and Instagram. Each provider is bound by contractual agreements to use your data solely for the agreed-upon purposes and protect it under the respective privacy laws.

If required, we may also share your information in response to legal requests, to protect our rights, or in the event of a business transfer, such as a merger or acquisition. For a detailed list of third-party providers and their data-sharing practices, please refer to the Data We Use section.

4.1 With Your Consent

We share your personal information with third parties when you have provided explicit consent, such as participating in promotions with PMC partners or third parties.

4.2 Public Profiles and Shared Content

Information you publish publicly on our website, such as in forums or blogs, can be indexed by search engines and visible to the public. While we don’t control third-party search engines, you may update your content, though changes may not immediately reflect in their databases.

4.3 Compliance with Law and Legal Requests

PMC may disclose your personal information to law enforcement, courts, or governmental authorities to:

Comply with legal obligations.

Respond to claims or criminal investigations.

Protect the rights, property, or safety of PMC, its users, or the public.

Where possible, users will be informed about legal requests unless prohibited by law or if it poses risks of fraud or harm. This ensures transparency and adherence to legal requirements across all regions.

4.4 Service Providers

We engage third-party service providers located inside and outside the EEA, including the EU, Iceland, Liechtenstein, and Norway, to assist with tasks such as:

(i) Verifying identity and documents.

(ii) Checking information against public databases.

(iii) Conducting background checks, fraud prevention, and risk assessments.

(iv) Product development, debugging, and maintenance.

(v) Providing PMC services via third-party platforms.

(vi) Customer service, payments, and advertising.

These service providers are contractually obligated to use your data strictly for the purposes for which it was disclosed, as per this policy. Data Processing Agreements (DPAs) are legal contracts that outline how personal data should be handled, ensuring compliance with data protection laws.

4.5 Business Transfers

In cases of mergers, acquisitions, reorganization, or asset sales, your personal information may be transferred. You will be notified if your information becomes subject to a different privacy policy.

4.6 Data Transfers Outside Your Region

We may transfer your personal data to service providers located outside your country or region to facilitate our operations, such as hosting services or cloud-based solutions. We ensure that all transfers comply with applicable data protection laws (e.g., GDPR, CCPA, PIPEDA) and that adequate safeguards are in place to protect your data. This includes entering into Data Processing Agreements (DPAs) to ensure your rights are upheld. For details on third-party providers and their locations, refer to Section 2 “How We Use Your Data”.

4.7 Opt-Out for Data Sharing/Selling

In compliance with the California Consumer Privacy Act (CCPA), California residents have the right to opt out of data sharing or selling to third-party services. We recommend using browser tools like ad blockers or cookie managers to assist with this. You may also contact us via our contact page or email info@phuket-meditation.com to facilitate your opt-out preferences. Below you may also opt out of cookies we use.

4.8 Breach Notification

In the event of a data breach that involves your personal information, we are committed to informing affected users promptly. In compliance with the General Data Protection Regulation (GDPR), we will notify relevant supervisory authorities within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to your rights and freedoms. We will also inform you directly if the breach poses a high risk to your personal data, outlining the nature of the breach and any steps you can take to protect yourself.

Examples of what constitutes a data breach include unauthorized access to your personal information, accidentally sharing your data, or losing information due to system failures. Understanding these examples will help you recognize potential risks to your personal data.

4.9 Regular Reviews of Third-Party Policies

We periodically review and audit the privacy policies and terms of service of all third-party services to ensure continued compliance with data privacy regulations. This ensures that any updates or changes in their policies align with our privacy standards and legal obligations.

5 Security

We take the security of your personal data very seriously. To protect your information from unauthorized access, loss, or alteration, we continually update our administrative, technical, and physical security measures. These safeguards include firewalls, encryption, and secure access protocols. Additionally, we use tools like Login Security, DKIM, SPF, DMARC, TLS/SSL encryption, and vulnerability detection. While we strive to secure your data, no system can be 100% secure. By using our services, you accept any potential security risks. If you suspect unauthorized access, please contact us immediately.

For a comprehensive understanding of our terms regarding the use of this website, please refer to our Terms of Use.

6 Purpose & Retention Period

We collect personal information to facilitate our services, improve user experiences, and comply with legal obligations. Sharing your information helps us provide a seamless experience, while retention periods ensure we have necessary data for ongoing customer relationships and legal compliance. The information we collect is crucial for running our business, helping us handle bookings, process payments, connect with customers, and improve our services. We store this data for as long as necessary to maintain our relationship with you or to fulfill legal requirements.

For this purpose we use the following data:

A first and last name

An email address

A telephone number

IP Address

Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement

Geolocation data

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We determine the retention period according to fixed objective criteria: We retain personal data only as necessary to fulfill our obligations and enhance customer service. Data is kept for as long as a customer relationship exists, and customers can request deletion of their data at any time.

For this purpose we use the following data:

A first and last name

An email address

Account Name or Alias

IP Address

Through the “Comment Box” and “Contact Forms” you may share other information with us including but not limited to your personal travel preferences, personal health concerns or personal health goals. We will store and utilize this additional information securely in the same manner that we store and utilize your personal Information. We don’t use your Personal Information for any other purpose.

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We determine the retention period according to fixed objective criteria: We retain personal data collected through our contact forms for as long as necessary to respond to inquiries and fulfill our communication obligations. This data may be stored indefinitely for future reference and support purposes, unless a user requests deletion. In such cases, we will promptly remove the relevant data in accordance with our privacy policy.

For this purpose we use the following data:

A first and last name

Account name or alias

A home or other physical address, including street name and name of a city or town

An email address

A telephone number

IP Address

The basis on which we may process these data is:

It is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party. 

Retention period

We determine the retention period according to fixed objective criteria: We retain payment data for as long as necessary to process transactions and comply with legal obligations. This data is kept indefinitely to facilitate future purchases and for accounting purposes, unless a customer requests deletion. In such cases, we will remove the relevant data in accordance with our privacy policy.

For this purpose we use the following data:

A First and Last Name

Account Name or Alias

A Home or Other Physical Address, Including Street Name and Name of a City or Town

An Email Address

A Telephone Number

IP Address

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We determine the retention period according to fixed objective criteria: We retain account data indefinitely as long as the account is active. If a user requests account deletion, we will remove their data in accordance with our privacy policy. Retaining this data allows us to recognize returning users and provide personalized services.

For this purpose we use the following data:

A First and Last Name

Account Name or Alias

An Email Address

The basis on which we may process these data is:

Upon the provision of consent.

Retention period

We determine the retention period according to fixed objective criteria: We retain personal data for newsletter subscribers indefinitely until they choose to unsubscribe. This allows us to provide ongoing communication and updates. Subscribers can request the deletion of their data at any time, and we will honor such requests in accordance with our privacy policy.

With your permission we collect your email address in order to send information, respond to inquiries, and/or other requests or questions. We also process orders and to send information and updates pertaining to orders. Furthermore, we may send you additional information related to your product and/or service. And with your prior consent, we may also add you to our mailing list or continue to send emails to our clients after the original transaction has occurred.

For this purpose we use the following data:

A First and Last Name

An Email Address

IP Address

The basis on which we may process these data is:

It is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party. 

Retention period

We determine the retention period according to fixed objective criteria: We retain personal data, including names, email addresses, and phone numbers, for the duration of the customer relationship and for future reference to enhance service continuity. Specifically, we keep this data indefinitely to recognize returning guests, provide personalized service, and offer eligibility for discounts or special offers. Customers can request the deletion of their data at any time, and we will honor such requests in accordance with our privacy policy.

For this purpose we use the following data:

Internet activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement

Geolocation Data

IP Address

We automatically collect log data and device information when you access and use the site. That information includes, among other things: details about how you’ve used the site (including if you clicked on links to third party applications), IP address, access dates and times, hardware and software information, device information, device event information, unique identifiers, crash data, cookie data, and the pages you’ve viewed or engaged with before or after using the website.

The basis on which we may process these data is:

It is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, and that interest outweighs the interest of the person concerned.

Retention period

We determine the retention period according to fixed objective criteria: We retain data collected for statistical analysis indefinitely to ensure continuous improvement of our website and services, allowing us to track trends and user behavior over time.

We collect information about your interactions with the Site such as the pages or content you view, your searches for Products or Services, payment or donation requests you have made, and other actions on the Site.

Refusal to provide Personal Information may affect our ability to service your requests, confirm your stay, or provide you with information about the Phuket Meditation Center and our offer. With your consent, we may also use the Personal Information that you provide to send you promotional and marketing material about PMC via email.

For this purpose we use the following data:

A First and Last Name

Account Name or Alias

A home or other physical address, including street name and name of a city or town

An Email Address

A Telephone Number

IP Address

The basis on which we may process these data is:

It is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party. 

Retention period

We determine the retention period according to fixed objective criteria: We retain personal data indefinitely to support ongoing customer relationships and to recognize returning guests. Customers can request the deletion of their data at any time, and we will honor such requests in accordance with our privacy policy.

Retention of Personal Information

We collect personal information to facilitate our services, improve user experiences, and comply with legal obligations. The information we collect is important for our business. It helps us manage bookings, process payments, connect with customers, and improve what we offer. Our retention periods are guided by legal requirements and operational needs, ensuring data is stored securely and used responsibly.
The information collected may include personal details such as your name, contact information, and any communication preferences. We store this data for as long as necessary to maintain our relationship with you or to fulfill legal requirements. For specific details about cookie retention, please see our Cookie Policy.

7 Children’s Privacy

We do not knowingly collect personal information from children under the age of 13. The Site and Service are not directed toward individuals under 13, in compliance with COPPA in the US and relevant privacy regulations in other regions. If we discover that personal information has been collected from someone under 13 without parental consent, we will promptly delete that data. If you believe we have collected such information, please contact us immediately at info@phuket-meditation.com.

8 Amendments

We reserve the right to amend or supplement the contents and/or information of this privacy statement without prior notice. Any changes will be communicated through the website, where we will post the revised Privacy Statement along with an updated “Last Updated” date at the top of the page. Changes made to the website shall become effective on the date of posting.

We encourage you to regularly review this privacy statement to stay informed about our practices and how they may affect your personal information. Significant changes will be communicated directly through email or prominent notices on our website.

We will review and update this policy as necessary, especially when we install new plugins, add services, or as privacy regulations evolve. Your continued use of the Site and Services after any amendments indicates your acceptance of the updated Privacy Statement. If any proposed change is unacceptable to you, you may request us to remove your Personal Information from our records by writing an email to info@phuket-meditation.com. For inquiries regarding policy amendments, you can also contact our legal representatives as listed in our Imprint.

9 Submitting a Complaint

If you are not satisfied with the way we handle your personal data or believe we are not complying with applicable data protection regulations, you have the right to submit a complaint to the appropriate Data Protection Authority in your jurisdiction. This includes:

GDPR (EU): You can submit a complaint to your local supervisory authority. A list of authorities can be found on the European Data Protection Board website.

CCPA (California, USA): You can contact the California Attorney General’s Office. More information can be found on their official website.

PIPEDA (Canada): You may file a complaint with the Office of the Privacy Commissioner of Canada.

APPs (Australia): Complaints can be submitted to the Office of the Australian Information Commissioner (OAIC).

Other Jurisdictions: If you are in a region with specific data protection laws, please consult the relevant authority for submitting complaints.

We encourage you to reach out to us directly at info@phuket-meditation.com before submitting a complaint, as we aim to address and resolve any concerns you may have. Please note that any legal matters concerning this privacy policy will be governed by the laws of the Kingdom of Thailand, and any disputes or claims will be handled under the jurisdiction of Thailand.

10 Contact Information

If you have any questions or concerns about this Privacy Policy or how we collect, use, or secure your personal information, please reach out to us at:

Phuket Meditation Co., Ltd.
69/509 Moo 1, Tambon Chalong
Amphoe Mueang, Phuket 83130, Thailand

+66872797655

Send us a Mail

You can also send us an email or visit our contact page for more information. We welcome your feedback on our privacy practices to help us improve.