Privacy Policy

1. Introduction

Kinscript ("we", "us", "our") is committed to handling personal information with care and transparency. This Privacy Policy explains what data we collect when you use our website at kinscript.blog or engage with our services, how we use it, and what rights you have over it.

Our services are based in Ayutthaya, Thailand. We process personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). If you have questions about this policy, please contact us at [email protected].

2. Personal Data We Collect

We collect only the data necessary to respond to enquiries and deliver our services. This includes:

• Contact information — name, email address, and telephone number (where provided via our contact form)
• Message content — the text of any message you send through our website form
• Usage data — pages visited, time spent, and browser type, collected via analytics cookies (only if you have given consent)

We do not collect sensitive personal data such as financial details, health data, or identification documents through this website. Documents brought to in-person sessions are reviewed during the session only and are not retained, copied, or recorded by Kinscript.

3. Legal Basis for Processing

Under Thailand's PDPA, we rely on the following legal bases for processing your personal data:

• Consent — for analytics and marketing cookies, which you can accept or decline via our cookie notice
• Legitimate interests — for responding to enquiries you have sent to us, and for maintaining basic website security logs
• Contract performance — for delivering services you have booked and paid for

4. How We Use Personal Data

We use the personal data we collect to:

• Respond to enquiries submitted through our contact form
• Confirm session bookings and send practical session information
• Improve the content and usability of this website using anonymised analytics
• Meet any legal obligations that apply to us as a business operating in Thailand

We do not sell personal data to any third party. We do not use personal data for automated decision-making or profiling.

5. Data Retention

We retain personal data for the following periods:

• Enquiry records — 12 months from the date of last contact, unless a booking is confirmed, in which case records are retained for 3 years for administrative purposes
• Analytics data — anonymised data aggregated monthly; raw session data retained for 14 months
• Cookie consent records — stored in your browser's local storage and not transmitted to us

6. Data Protection Measures

We take reasonable steps to protect personal data from unauthorised access, loss, or disclosure. These include:

• HTTPS encryption for all data transmitted through our website
• Restricted internal access to personal data — only those who need it for service delivery
• No storage of sensitive document contents from in-person sessions
• Prompt notification to affected individuals if a data breach occurs that poses a risk to their rights

7. Cookies

Our website uses cookies. Essential cookies are required for the site to function. Analytics and preference cookies are optional and only set with your consent. Please see our Cookie Policy for a full explanation of each cookie type and how to manage your preferences.

8. Third-Party Services

We may use the following third-party services, each of which has its own privacy practices:

• Google Analytics — website usage analysis (only if analytics cookies are accepted)
• Google Maps — embedded map on our homepage to show our location
• Email provider — for handling enquiry responses

We are not responsible for the privacy practices of third-party websites linked to from our site.

9. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of data we no longer have a legal basis to hold
• Right to data portability — to receive data in a commonly used format where applicable
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — to withdraw consent for cookie-based processing at any time via our Cookie Policy page
• Right to lodge a complaint — with the Office of the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, write to [email protected]. We will respond within 30 days.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data about a minor, please contact us at [email protected] so that we can remove it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of our website after a change constitutes acceptance of the updated policy. For significant changes, we will notify users via the website or by email where we hold contact details.