Privacy Policy

1. Introduction

Lodestar ("we," "us," "our") is a document organisation and retirement information service based at 920 Phaya Thai Road, Ratchathewi, Bangkok 10400, Thailand. This Privacy Policy describes how we collect, use, store, and protect your personal information when you visit our website, contact us, or attend one of our sessions.

We take your privacy seriously. If you have questions, please contact us at [email protected].

2. Personal Data We Collect

We collect only the information necessary to manage bookings and communicate with you:

• Contact information: name, email address, and phone number provided via our contact form or by calling us directly.
• Booking details: the session type requested, preferred dates, and any notes you include in the message field.
• Website usage data: standard access logs including IP address, browser type, and pages visited, collected automatically by our hosting provider.
• Cookies: only as described in our Cookie Policy and subject to your consent.

We do not collect, copy, retain, or store any personal documents you bring to sessions. All such paperwork remains entirely with you.

3. How We Use Your Data

We use the personal data you provide for the following purposes:

• Responding to your enquiries and managing your booking
• Sending appointment confirmations and any pre-session information
• Following up after sessions if you have requested this
• Improving our services using aggregated, anonymised feedback data

Legal basis: Processing is based on your consent (contact form submission) or on the performance of a contract (booking fulfilment). We do not use your data for automated decision-making or profiling.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Retention

Contact and booking information is retained for up to 24 months from your last interaction with us, after which it is deleted. Website access logs are retained for up to 12 months. You may request deletion of your data at any time by contacting [email protected].

5. Third-Party Services

We use a small number of third-party services to operate our website. These may process technical data about your visit:

• Web hosting provider — processes server access logs
• Analytics (if consented): Google Analytics, used to understand aggregate visitor behaviour
• Google Maps: an embedded map is used on our home page; Google's own privacy policy applies to that service

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies before providing personal information.

6. How We Protect Your Data

• Website connections use HTTPS encryption
• Access to contact records is restricted to staff who need it to manage bookings
• Contact data is stored in password-protected systems
• In the event of a data breach affecting your personal information, we will notify you within 72 hours where required by applicable law

7. Cookies

Our website uses cookies as described in our Cookie Policy. Essential cookies are used for site functionality. Analytics and preference cookies are only placed with your consent. You can manage your preferences at any time via the Cookie Policy page.

8. Your Rights

Under the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable, other data protection laws, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate data
• Right to erasure: to request deletion of your data where we are not required to retain it
• Right to data portability: to receive your data in a commonly used format
• Right to withdraw consent: at any time, without affecting prior processing
• Right to object: to processing based on legitimate interests
• Right to lodge a complaint: with the Office of the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately at [email protected].

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Material changes will be communicated via our website. Continued use of our services after changes take effect constitutes acceptance of the updated policy.