Privacy Policy

1. Introduction

Latterly ("we", "us", "our") is committed to handling personal data responsibly and transparently. This policy explains what personal data we collect, why we collect it, how it is used, and what rights you have in relation to it.

Latterly operates in Thailand and handles personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). Where our participants or enquirers are based in the European Economic Area, we also apply GDPR-consistent standards as a matter of good practice.

Questions about this policy should be directed to: [email protected]

2. Who we are

Data controller: Latterly
Address: 118 Phaya Thai Road, Thanon Phaya Thai, Ratchathewi, Bangkok 10400, Thailand
Email: [email protected]
Phone: +66 95 472 8361

3. What personal data we collect

We collect the following categories of personal data:

• Contact information: name, email address, telephone number (if provided)
• Booking and session information: which service was booked, session dates, any notes shared during a booking enquiry
• Website usage data: anonymised analytics data (pages visited, time on site) collected via cookies, if consented
• Correspondence: the content of messages sent to us via the contact form or by email

We do not collect copies of personal retirement documents. Any documents reviewed during a session remain with the participant throughout and are not retained, scanned, or photographed by Latterly.

4. How we collect data

• Contact form on our website
• Direct email correspondence
• Telephone conversations (note-taking for booking purposes only)
• Cookies and analytics tools on our website (see Section 8)

5. Legal basis for processing

• Contract performance: processing necessary to deliver a booked session or toolkit
• Legitimate interests: responding to enquiries, improving our services, maintaining records for operational purposes
• Consent: for optional analytics cookies and marketing communications (where separately requested)
• Legal obligation: retaining booking records as required for business and tax purposes under Thai law

6. How we use your data

• To respond to enquiries and process bookings
• To deliver sessions, toolkits, and resource materials
• To send confirmation and follow-up communications relating to your booking
• To send optional informational updates about future series dates, if you have opted in
• To improve our website and session materials through anonymised analytics
• To meet legal obligations, including record-keeping requirements

7. Data retention

• Booking and contact records: retained for 3 years from the date of service
• Enquiry messages where no booking resulted: deleted after 12 months
• Financial transaction records: retained for 7 years as required under Thai Revenue Code
• Analytics data: anonymised and aggregated; no individual retention limit applies

8. Cookies

We use essential cookies for website functionality and, with consent, analytics cookies to understand how the site is used. We do not use advertising or tracking cookies. Full details are in our Cookie Policy.

9. Data sharing

We do not sell, rent, or share personal data with third parties for commercial purposes. Data may be shared only in the following limited circumstances:

• With service providers who support our operations (e.g. website hosting) under data processing agreements
• Where required by Thai law, a court order, or a competent authority

10. Data security

Personal data is stored on password-protected systems with access restricted to those who need it. We use encrypted connections for web communications. In the event of a data breach affecting your personal data, we will notify you and the relevant authority as required under PDPA.

11. Your rights

Under Thailand's PDPA, you have the following rights in relation to your personal data:

• Right to access: to receive a copy of the personal data we hold about you
• Right to rectification: to correct inaccurate data
• Right to erasure: to request deletion of data we no longer need to retain
• Right to data portability: to receive your data in a portable format
• Right to object: to object to processing based on legitimate interests
• Right to withdraw consent: at any time, where processing is based on consent
• Right to lodge a complaint: with the Personal Data Protection Committee of Thailand

To exercise any of these rights, contact: [email protected]. We will respond within 30 days.

12. Third-party links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any site you visit.

13. Children's privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have done so, we will delete that data promptly.

14. Changes to this policy

We may update this policy from time to time. The most recent version will always be available on this page. We will notify registered participants of significant changes by email where we hold a valid address.

15. Contact

For any privacy-related queries:
Email: [email protected]
Post: 118 Phaya Thai Road, Thanon Phaya Thai, Ratchathewi, Bangkok 10400, Thailand