Privacy Policy

Aurevia ("we", "us", "our") is committed to handling personal data responsibly and transparently. This policy explains what personal information we collect when you use our website at aureviay.world or contact us to enquire about our sessions, how we use that information and what rights you have in relation to it.

This policy applies to all visitors, enquirers and session participants. We operate in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and applicable international data protection principles.

If you have questions about this policy, contact us at [email protected].

We collect personal data only when it is provided voluntarily through our enquiry form or direct contact. The data we may collect includes:

• Full name
• Email address
• Phone number (if provided)
• Message content relating to your enquiry
• Organisation or employer name (if provided voluntarily)

We also collect limited technical data automatically via cookies and web analytics tools, including IP address (anonymised where possible), pages visited, browser type and referral source. See Section 5 for cookie details.

Legal basis: We process personal data on the basis of your consent (enquiry form submission), legitimate interest (improving session delivery and responding to enquiries) and, where a booking is made, the performance of a service agreement.

Retention: Enquiry data is retained for up to 24 months unless a booking relationship exists, in which case we retain records for up to 5 years for administrative purposes. Technical/analytics data is retained for up to 14 months.

Personal data collected is used for the following purposes:

• Responding to your enquiry and providing session information
• Confirming session bookings and sending relevant administrative correspondence
• Sending post-session follow-up materials if requested
• Improving our session content and website based on aggregated feedback
• Complying with legal obligations

We do not use your personal data for unsolicited marketing. If you receive follow-up correspondence after a session, it is limited to materials directly related to the session you attended. You may opt out at any time by contacting us at [email protected].

We do not sell, rent or share your personal data with third parties for commercial purposes. We may share data with service providers who assist with website hosting or analytics, subject to data processing agreements that restrict how they may use the data.

We apply reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration or destruction. These include:

• HTTPS encryption for all data transmitted through our website
• Access controls limiting internal access to personal data to staff who need it for their role
• Regular review of data handling procedures

In the event of a data breach that may affect your rights or interests, we will notify affected individuals and relevant authorities as required under the PDPA.

Our website uses cookies to support basic site functions and, where you consent, to collect anonymised analytics data about how visitors use the site. We use the following types:

• Essential cookies: Required for the site to function. Cannot be disabled.
• Analytics cookies: Help us understand page usage patterns. Optional.
• Preference cookies: Remember your cookie consent choice. Optional.

You can manage your cookie preferences at any time via our Cookie Policy page.

Under the PDPA and applicable data protection law, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data where there is no lawful basis for us to retain it.
• Right to data portability: Request your data in a structured, commonly used format.
• Right to object: Object to processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You may submit a complaint to Thailand's Personal Data Protection Committee (PDPC) or the relevant supervisory authority if you believe your data rights have been violated.

To exercise any of these rights, contact us at [email protected]. We aim to respond within 30 days.

Data Controller: Aurevia

Address: 145 Naresuan Road, Nai Mueang, Phitsanulok 65000, Thailand

Privacy Email: [email protected]

Phone: +66 84 736 2950