Privacy Policy

1. Data we collect

We collect the following categories of personal data:

• Contact information: name, email address and, where provided, phone number. Collected when you submit our contact form or communicate with us directly.
• Enquiry content: the message or information you include in your form submission or communication.
• Technical data: IP address, browser type, pages visited and referral source, collected automatically when you visit our website via cookies and server logs.
• Cookie preference data: your consent choices stored locally in your browser via localStorage.

We do not collect sensitive personal data (such as health, financial or identification data) as part of standard service delivery. If a household administration setup requires any sensitive information, we will seek explicit consent before handling it.

2. Legal basis for processing

We process personal data under the following legal bases, consistent with Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

• Consent: you have submitted our contact form and agreed to our Privacy Policy and Terms & Conditions. You may withdraw consent at any time.
• Contract performance: where you have engaged a Kinly service, we process data necessary to deliver that service.
• Legitimate interests: website analytics and security monitoring, where our interest in operating a secure and functional website does not override your rights.

3. How we use your data

• To respond to your enquiry and discuss which Kinly service may be appropriate for your household
• To deliver the service you have engaged — including setup of household folders, workshop coordination and toolkit delivery
• To communicate follow-up information or clarifications related to your service
• To improve our website and understand how visitors engage with our content (via analytics)
• To comply with our legal obligations under Thai law

We do not use your personal data for automated decision-making or profiling. We do not send marketing communications unless you have explicitly indicated interest in receiving them.

4. Data retention

Enquiry data is retained for up to 12 months from the date of your last contact. Service-related data (for completed engagements) is retained for 3 years from completion, in line with standard record-keeping. Technical and analytics data is retained for up to 13 months. You may request deletion at any time (see Section 7).

5. Third-party sharing

We do not sell personal data. We may share limited data with:

• Website hosting and analytics providers operating under data processing agreements consistent with Thai PDPA requirements
• Email service providers used to manage and respond to enquiries
• Authorities where required by Thai law or legal process

No personal data is transferred outside of Thailand or to jurisdictions without adequate data protection measures without appropriate safeguards.

6. Cookies

Our website uses cookies for essential functionality and analytics. We record your cookie preference in your browser's localStorage. For full details of the cookies we use, see our Cookie Policy.

You can manage cookie preferences at any time via the Cookie Policy page or by clearing your browser's localStorage.

7. Your rights

Under Thailand's PDPA, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate data
• Right to erasure: to request deletion of your personal data (subject to legal retention obligations)
• Right to data portability: to receive your data in a structured, commonly-used format
• Right to object: to object to processing based on legitimate interests
• Right to withdraw consent: at any time where processing is based on consent
• Right to lodge a complaint: with Thailand's Personal Data Protection Committee

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, loss or destruction. Our website uses HTTPS encryption for data in transit. Access to personal data is restricted to Kinly team members who need it for service delivery or administration. In the event of a data breach affecting your rights, we will notify you as required under applicable Thai law.

9. Children's privacy

Our website and services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] so we can delete it promptly.

10. Third-party links

Our website may contain links to external resources. Kinly is not responsible for the privacy practices of third-party websites and encourages you to review their privacy policies independently.

11. Changes to this policy

We may update this Privacy Policy periodically. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website after a policy update constitutes acceptance of the revised policy. For material changes, we will provide notice via the website.

12. Contact and data controller