Privacy Policy

Introduction

Cloverstone respects the privacy of individuals who inquire about or participate in our financial education programs. This privacy policy explains how we collect, use, store, and protect personal information provided to us through our website, program enrollment, and educational services.

We operate in accordance with Thailand's Personal Data Protection Act (PDPA) and maintain practices designed to protect participant confidentiality. This policy applies to information collected through our website at cloversstoness and during program delivery.

Information We Collect

Personal Information You Provide

When you contact us or enroll in programs, we collect information you voluntarily provide including name, email address, phone number, and program-specific information relevant to educational delivery. For legacy planning programs, we may collect additional family and financial information necessary for comprehensive planning guidance.

Technical Information

Our website collects standard technical information including IP address, browser type, device information, and pages visited. This information helps us understand how people use our website and improve the user experience.

Cookies and Tracking

We use essential cookies required for website functionality and optional analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings or our cookie management tool. For more details, see our Cookie Policy.

How We Use Your Information

We use collected information for the following purposes:

• Responding to inquiries about programs and enrollment
• Processing program enrollments and managing participant records
• Delivering educational services and providing program materials
• Communicating about program schedules, changes, or updates
• Improving our educational offerings and website functionality
• Complying with legal and regulatory obligations

We do not use personal information for marketing purposes without explicit consent. We do not sell or rent personal information to third parties.

Legal Basis for Processing

Under Thai PDPA, we process personal information based on:

• Consent: When you provide information voluntarily through contact forms or enrollment
• Contract Performance: To deliver educational services you have enrolled in
• Legitimate Interest: To improve our services and maintain business operations
• Legal Obligation: To comply with Thai regulations applicable to educational services

Information Sharing and Disclosure

We maintain strict confidentiality regarding participant information. We do not share personal data with third parties except in the following limited circumstances:

• Service Providers: We may share information with trusted service providers who assist in website hosting, payment processing, or administrative functions. These providers are contractually obligated to protect data and use it only for specified purposes.
• Legal Requirements: We may disclose information when required by Thai law, court order, or government regulation.
• Consent: We may share information when you have explicitly authorized us to do so.

We never share financial discussions, program participation details, or educational records with outside parties without explicit permission.

Data Security

We implement appropriate technical and organizational measures to protect personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure server infrastructure with encryption
• Access controls limiting data access to authorized personnel only
• Regular security assessments and updates
• Secure document storage for physical records
• Staff training on data protection practices

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy or as required by Thai law. Generally, we retain program enrollment records for seven years after program completion for administrative and legal compliance purposes. Contact inquiry information is retained for two years unless you request earlier deletion.

Your Rights

Under Thai PDPA, you have the following rights regarding your personal information:

• Right to Access: Request confirmation of what personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data in certain circumstances
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to certain processing activities
• Right to Withdraw Consent: Withdraw previously given consent at any time
• Right to Lodge Complaint: File a complaint with the Thai Personal Data Protection Committee

To exercise these rights, please contact us at privacy@cloversstoness. We will respond to your request within 30 days as required by Thai law.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are intended for adults aged 18 and older. We do not knowingly collect personal information from minors without parental consent. If you believe we have inadvertently collected information from a minor, please contact us immediately.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify program participants of material changes via email. The current version will always be available on our website with the last updated date clearly displayed.

Contact Information

For questions about this privacy policy or to exercise your data protection rights, please contact us: