Privacy Policy

Introduction

Redpine ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you engage with our financial education programs, visit our website, or interact with our services. We comply with Thailand's Personal Data Protection Act (PDPA) and maintain high standards of data protection.

By using our services or providing us with your personal information, you agree to the practices described in this policy. If you do not agree with these terms, please do not use our services.

Information We Collect

Personal Information

When you register for our programs or contact us, we may collect the following personal information:

• Name and contact details (email address, phone number, mailing address)
• Identification information (if required for program registration)
• Payment information (processed through secure third-party payment processors)
• Professional information (employment, income level range for program suitability)
• Program preferences and learning objectives
• Communication history with Redpine

Financial Information

For Summit View participants who choose to share detailed financial information for comprehensive planning purposes, we may collect:

• Asset and liability information
• Income and expense data
• Investment holdings
• Retirement planning details
• Tax-related information

Note: Sharing detailed financial information is voluntary and only necessary for participants in our comprehensive planning program.

Technical Information

When you visit our website, we automatically collect certain technical information:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on site
• Referring website or source
• Cookies and similar tracking technologies (see our Cookie Policy)

How We Use Your Information

We process your personal data for the following purposes:

Program Delivery

• Processing program registrations and payments
• Delivering educational content and materials
• Providing personalized financial education guidance
• Scheduling sessions and sending program reminders
• Issuing completion certificates

Communication

• Responding to inquiries and support requests
• Sending program updates and important notices
• Notifying you about new programs or services (with your consent)
• Conducting participant satisfaction surveys

Legal and Compliance

• Maintaining business records as required by Thai law
• Complying with legal obligations and regulatory requirements
• Protecting our legal rights and preventing fraud
• Enforcing our terms and conditions

Service Improvement

• Analyzing program effectiveness and participant outcomes
• Improving educational content and teaching methods
• Understanding program demand and participant needs
• Developing new programs and services

Legal Basis for Processing

Under Thailand's PDPA, we process your personal data based on the following legal grounds:

• Consent: You have provided explicit consent for specific processing activities
• Contract Performance: Processing is necessary to fulfill our educational services agreement with you
• Legal Obligation: Processing is required to comply with Thai laws and regulations
• Legitimate Interest: Processing is necessary for our legitimate business interests (program improvement, fraud prevention) while respecting your privacy rights

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

Service Providers

We engage trusted third-party service providers to support our operations:

• Payment processors (for secure transaction handling)
• Email and communication platforms
• Cloud storage providers (with encryption)
• Website hosting services

These service providers are contractually obligated to protect your data and use it only for the specified purposes.

Legal Requirements

We may disclose your information when required by Thai law, court order, or government regulation, or when necessary to protect our rights, property, or safety, or that of our participants or the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring organization, subject to the same privacy protections outlined in this policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure servers with regular security updates
• Access controls limiting data access to authorized personnel only
• Regular security audits and vulnerability assessments
• Employee training on data protection practices
• Secure backup procedures

While we strive to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but will notify you promptly of any data breaches in accordance with Thai law.

Data Retention

We retain your personal information for the following periods:

• Program participant data: 7 years after program completion (for record-keeping and follow-up support)
• Payment records: 7 years (as required by Thai accounting regulations)
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics: 24 months
• Financial planning documents (Summit View): 10 years after engagement ends

After these retention periods, we securely delete or anonymize your personal information unless we are required by law to retain it longer.

Your Rights

Under Thailand's PDPA, you have the following rights regarding your personal data:

Right to Access

You may request a copy of the personal information we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal information, subject to our legal retention obligations.

Right to Restrict Processing

You may request limitation of how we process your personal information in certain circumstances.

Right to Data Portability

You may request transfer of your personal information to another service provider in a structured, commonly used format.

Right to Object

You may object to processing of your personal information for certain purposes, including direct marketing.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days as required by Thai law.

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your website experience and analyze usage patterns. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

Children's Privacy

Our services are intended for individuals aged 18 and older. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a person under 18, we will delete it promptly.

International Data Transfers

Your personal information is primarily stored and processed in Thailand. If we transfer data outside Thailand, we ensure appropriate safeguards are in place to protect your information in accordance with PDPA requirements.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new "Last Updated" date. For material changes, we may also send you direct notification via email.

Contact Us

If you have questions about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact us:

Supervisory Authority

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) through the Office of the Personal Data Protection Committee.