Privacy Policy

1. Data We Collect

We collect only the personal information necessary to communicate with enquirers and administer our educational programs. This includes:

• Name and contact information (email address, telephone number) provided via our enquiry form
• Programme enrolment information provided during registration
• Basic information shared during programme sessions (subject to strict confidentiality standards)
• Technical data collected automatically via cookies and analytics tools (see Section 5)

We do not collect financial data such as bank account numbers, investment portfolio details, or tax information. Any financial information discussed during a Personal Financial Mapping session is handled under strict confidentiality protocols and is not stored in digital systems beyond the agreed written summary.

2. How We Use Your Data

Your personal information is used only for the following purposes:

• Responding to enquiries submitted through our contact form
• Administering programme enrolment, scheduling, and communications
• Providing written summaries and educational materials related to your programme
• Sending optional programme updates to alumni who have opted in
• Improving our website based on aggregate usage analytics

We do not use your data for direct marketing without your explicit consent, and we never share your data with financial product providers, advisors, or commercial partners.

3. Legal Basis for Processing

We process personal data under the Thai Personal Data Protection Act B.E. 2562 (2019) ("PDPA") on the following legal bases: (a) consent, where you have provided it via our enquiry form or programme enrolment; (b) performance of a contract, where processing is necessary to administer a programme you have enrolled in; and (c) legitimate interests, where we have a legitimate interest in responding to enquiries and improving our services, provided this does not override your data rights.

4. Data Retention

Enquiry data is retained for a maximum of 12 months if no programme enrolment follows. Programme participant data is retained for 36 months following programme completion, after which it is securely deleted. Written summaries provided to participants are the participant's own document — numariass retains a copy for a maximum of 12 months unless otherwise agreed.

5. Cookies

Our website uses cookies to enable basic functionality and, where you have consented, to collect anonymous analytics data about how the site is used. We do not use cookies to track individual browsing behaviour across other websites or for targeted advertising purposes.

For detailed information, please see our Cookie Policy.

6. Data Security

We apply appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, loss, or destruction. These include access controls limiting data to staff with a specific operational need, secure transmission via HTTPS for all web communications, and periodic review of our data handling practices. In the event of a data breach that poses risk to individuals, we will notify affected persons and the relevant supervisory authority as required by the PDPA.

7. Sharing with Third Parties

We do not sell personal data. We may share data with third-party service providers strictly necessary to operate our website and communications (such as email hosting and website analytics). Any such providers are contractually bound to use data only for the specified purpose and to maintain appropriate data protection standards. We do not share participant data with financial institutions, advisors, or product providers.

8. Your Rights

Under the Thai PDPA, you have the following rights in relation to your personal data held by numariass:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of your data, subject to our legitimate retention requirements
• Right to data portability — to receive your data in a structured, commonly used format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — at any time where processing is based on consent, without affecting prior processing

To exercise any of these rights, please contact: [email protected]. We will respond within 30 days.

9. Children's Privacy

All numariass programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a minor, it will be deleted promptly.

10. External Links

Our website may contain links to external websites for reference. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies independently.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify participants by email if we hold a current address. The updated policy will always be available on this page with the revision date noted at the top.

12. Contact

For all privacy-related enquiries, including requests to exercise your data rights, please contact: