1. Who we are
Kindleo is the data controller for the personal information described in this policy. Our studio is at 91 Witthayu Road, Khwaeng Lumphini, Khet Pathum Wan, Bangkok 10330, Thailand. Questions about this policy can be sent to [email protected] or by calling +66 2 9472 3618 during weekday office hours.
2. The information we collect
We collect personal information in three ordinary ways: when you contact us through the website form, when we exchange emails about a possible engagement, and when we run a workshop or capability-building series with your team.
2.1 Information you give us directly
- Identifiers — name, business email address, and an optional phone number.
- Context — the short message you write describing what you are working on or want to discuss.
- Engagement records — for clients we have signed with, this includes the working notes produced during a workshop, the chosen concepts, and the written brief we hand back.
2.2 Information collected through ordinary website use
- Technical data — IP address, browser type, device type, and the pages you visit on the site.
- Cookie data — described in detail in our Cookie Policy.
3. Why we use it (legal basis)
Under Thailand's Personal Data Protection Act (PDPA) and the equivalent provisions elsewhere, we rely on the following lawful grounds:
- Contract — to discuss, prepare, and deliver a workshop or capability-building engagement you have asked us about.
- Legitimate interest — to keep modest records of past projects, to improve our facilitation practice, and to keep the site working as intended.
- Consent — for the optional cookie categories and any infrequent newsletter you choose to subscribe to.
- Legal obligation — to keep records that Thai accounting and tax law requires us to retain.
4. How long we keep it
We try to keep records only as long as we have a reasonable use for them.
- Enquiry messages that did not lead to an engagement — held for up to 12 months from the last contact, then deleted.
- Active client records — held for the duration of the engagement plus 24 months, after which non-essential material is deleted and only invoicing records are kept.
- Invoicing and accounting records — held for the period required by Thai law (currently five years).
- Website analytics — held in aggregate form, with raw event data kept no longer than 14 months.
5. Who we share it with
We do not sell personal information. We share it sparingly, and only with parties that help us run the studio:
- Our email and document hosting provider, used to receive enquiries and store working drafts.
- Our accounting bureau, used to issue invoices and meet tax filing duties.
- Web analytics, configured to use IP truncation and short retention windows where the option is available.
- Public authorities, when we are obliged to respond to a lawful request.
Where any of these parties are based outside Thailand, we ensure that an appropriate safeguard is in place — usually a written data processing agreement and the use of providers based in jurisdictions with comparable data protection regimes.
6. How we look after it
The studio is small, and the people who can read your records are also small in number. We use access controls on email and document storage, two-factor authentication on the accounts that handle personal data, and encrypted connections in transit. Working notes from a sprint are kept in a controlled folder that only the engagement team can open. If something goes wrong and a notifiable incident occurs, we will write to you and to the relevant supervisory authority within the periods PDPA requires.
7. Cookies
We use a small number of cookies on this site. Essential cookies make the site work; optional cookies (analytics, preferences) are only set if you give consent through the cookie banner or the controls on the cookie policy page. The full breakdown is on our Cookie Policy page.
8. Your rights
Under Thai PDPA and the comparable rights regimes that apply to international visitors, you can ask us to:
- confirm what personal data we hold about you, and provide a copy;
- correct anything inaccurate or out of date;
- delete records when there is no longer a lawful reason to keep them;
- restrict or object to certain forms of processing;
- port your data to another controller in a structured, machine-readable form;
- withdraw any consent you have given, at any time, without affecting earlier lawful processing;
- lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand if you are unhappy with how we have responded.
To exercise any of these rights, write to [email protected]. We will normally reply within thirty days; if a request is unusually involved we may take a little longer and will tell you why.
9. Third-party links
The site occasionally links out to other websites — for example, to a partner studio or a public reading list. We have no control over the privacy practices of those sites and recommend you read their own policies before sharing personal information with them.
10. Children
Our services are designed for working adults inside organisations. We do not knowingly collect personal information from anyone under the age of 18. If you believe a child has submitted information through our site, please contact us and we will remove the record.
11. Changes to this policy
If we revise this policy in a material way, we will post the updated version on this page and change the "last updated" date at the top. Smaller editorial changes — clarifications, corrected typos — may be made without notice. The most recent version is always the one published here.
12. Contact
Questions, requests, or complaints about this policy can be addressed to:
Kindleo
91 Witthayu Road, Khwaeng Lumphini, Khet Pathum Wan, Bangkok 10330, Thailand
Email: [email protected]
Phone: +66 2 9472 3618