Privacy Policy

1. Data Controller

Meridwell operates from 90/6 Tiwanon Road, Talat Khwan, Mueang Nonthaburi, Nonthaburi 11000, Thailand. For data protection enquiries, contact us at [email protected].

2. Information We Collect

We may collect the following categories of personal information:

• Contact information: name, email address, and phone number submitted through our enquiry form or provided directly.
• Correspondence: the content of messages or emails you send to us.
• Session information: details relevant to booking and delivering a facilitation session or workshop, including preferred dates, session topics (in general terms), and participant names where provided by the primary contact.
• Website usage data: technical information such as browser type, pages visited, and time spent, collected via analytics cookies where consent has been given.

3. How We Use Your Information

We use the information collected for the following purposes:

• Responding to enquiries and arranging initial consultation calls
• Confirming and delivering booked facilitation sessions, workshops, or documentation services
• Issuing invoices and processing payments
• Maintaining a record of agreed service terms and completed work
• Improving the quality and design of our website and services (where analytics consent is given)
• Complying with applicable legal obligations

We do not use personal data for unsolicited marketing. If you have engaged with us and we believe information about a relevant service update may be useful to you, we will contact you once only and honour any request not to receive further communications.

4. Legal Basis for Processing

Our processing of personal data is grounded in the following legal bases under Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

• Consent: for analytics cookies and any optional marketing communications
• Contractual necessity: for data required to deliver booked services and issue invoices
• Legitimate interests: for maintaining records of completed work and improving our services
• Legal obligation: where retention is required under applicable Thai law

5. Data Retention

We retain personal data only for as long as necessary:

• Enquiry data not resulting in a booking: deleted within 90 days of last contact
• Booking and session records: retained for 3 years from the date of the last service delivered
• Invoice and payment records: retained for 7 years in line with Thai accounting requirements
• Analytics data: retained in aggregated form only; individual session data deleted within 14 months

6. Data Security

Personal data is stored on password-protected, access-controlled systems. Files relating to sessions are held in encrypted storage accessible only to the Meridwell team members involved in delivering those services. We review our data handling procedures annually. In the event of a data breach that is likely to affect your rights or freedoms, we will notify you and the relevant supervisory authority without undue delay.

7. Cookies

Our website uses essential cookies to function correctly and optional analytics cookies to understand site usage. You can manage cookie preferences at any time. For full details, see our Cookie Policy.

8. Third-Party Services

We may use the following third-party services in operating our website and business: Google Analytics (where analytics consent is given), and standard email and document hosting services. We do not sell, rent, or otherwise share personal data with third parties for their own commercial purposes. When we engage processors, we do so under written data processing agreements.

9. Your Rights

Under the PDPA, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to ask us to correct inaccurate data
• Right to erasure: to request deletion where data is no longer necessary or where consent is withdrawn
• Right to restriction: to ask us to pause processing in certain circumstances
• Right to data portability: to receive data you have provided to us in a structured, machine-readable format
• Right to object: to processing based on legitimate interests
• Right to withdraw consent: at any time where processing is based on consent, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

11. Children's Privacy

Meridwell's services are intended for adults (18 and over). We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted information to us, please contact us and we will delete it promptly.

12. Supervisory Authority

If you have concerns about our data handling that we have not resolved to your satisfaction, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC), the supervisory authority responsible for data protection in Thailand.

13. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. For significant changes, we will make a more prominent notification. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

14. Contact

For any questions about this policy or your personal data: