General Policy Overview

Key Definitions

To help you read this policy, we define key terms used throughout. These definitions clarify who we mean by "user," what we consider to be "personal data," and which services are covered by this policy.

Personal data means any information relating to an identified or identifiable individual, including name, contact details, identification numbers, payment information, and any information provided for course registration or support.

Processing refers to any operation performed on personal data, such as collection, storage, retrieval, modification, use, disclosure, and deletion, whether automated or manual, that supports service delivery and administration.

User means any visitor to mindpalova.info, registrant for courses, subscriber to communications, or person who interacts with our services, including entrepreneurs, directors, and business representatives.

Service includes the spiritual growth programs, workshops, coaching sessions, online content, newsletters, customer support, and any features offered through mindpalova.info.

Cookies are small text files placed on a user's device to store preferences, enable functionality, and gather analytics information about site usage to improve our services and user experience.

Purposes of Processing

We process personal data for a set of defined purposes linked to delivering educational programs, managing accounts, ensuring security, and meeting legal or contractual requirements.

• Registration and administration of courses, including confirmation, attendance tracking, and certificate issuance.
• Payment processing, invoicing, and business record-keeping related to course fees and refunds.
• Communications such as course updates, schedules, announcements, and responses to support inquiries.
• Personalizing course content and recommendations based on professional background and learning preferences.
• Security, fraud prevention, and system maintenance to protect users and the integrity of our services.
• Analytics and service improvement to evaluate participation trends, measure outcomes, and design better learning experiences.
• Legal compliance and risk management to meet regulatory obligations and address disputes.
• Supporting group or corporate enrollments where organizations coordinate participation and require administrative reporting.

Legal Basis for Processing

We rely on appropriate bases for processing personal data depending on the context, ensuring that each processing activity is lawful and necessary.

• Performance of a contract: processing required to deliver courses, materials, and support requested by a user or organization.
• Legal obligation: processing needed to comply with laws, tax reporting, and business regulations.
• Legitimate interests: processing necessary for security, fraud prevention, analytics, and improving services, balanced against user privacy.
• Consent: where we ask for explicit permission for activities such as marketing communications, recordings, or optional personalized profiling.

Data Protection Rights (GDPR Principles)

Although based in Thailand, we recognize rights commonly referenced under GDPR and provide mechanisms for users to exercise control over their personal data where applicable.

• Right of access — request a copy of the personal data we hold about you and details of how it is processed.
• Right to rectification — request correction of inaccurate or incomplete information.
• Right to erasure — request deletion of personal data when retention is no longer necessary for the stated purpose.
• Right to restrict processing — ask us to limit processing while a dispute or verification is resolved.
• Right to data portability — request a machine-readable copy of personal data you provided for transfer to another provider where technologically feasible.
• Right to object — object to processing based on legitimate interests or for direct marketing.

Cookies and Tracking

We use cookies and similar technologies to provide essential functionality, measure performance, and offer optional personalization. You can control cookie settings via your browser or the site cookie manager.

Types of cookies we use include strictly necessary cookies for site operation, performance cookies for analytics, functional cookies for preferences, and advertising cookies when applicable to marketing partners.

Categories: necessary (session management), analytics (Google Analytics or similar), functional (language and display settings), and optional marketing cookies used only with consent.

To manage cookies, adjust your browser settings to block or delete cookies or use the cookie preference tool provided on mindpalova.info. Blocking some cookies may affect site functionality and access to course features.

Read the full cookie policy on mindpalova.info for details on specific cookies and retention periods.

Data Sharing and Disclosure

We share personal data only with trusted parties who need access to perform services on our behalf, or when required by law. Any sharing is limited to the minimum necessary information.

• Payment processors and business institutions for billing and fraud prevention.
• Technology vendors and hosting providers that store or process data needed to deliver the website and online learning platform.
• Professional service providers such as auditors, legal advisors, or consultants engaged to support business operations.
• Authorized corporate contacts when an organization enrolls participants and requests administrative data for payroll or internal record-keeping.
• Law enforcement or regulators when compelled by valid legal process or to protect rights, safety, or property.
• Aggregated or anonymized data which no longer identifies individuals may be shared for research, reporting, or marketing insights.

International Data Transfers

We may transfer personal data to service providers located in other countries to operate the website and deliver services. Such transfers are subject to safeguards appropriate to the destination to maintain a consistent level of protection.

Safeguards include contractual commitments, standard contractual clauses, data processing agreements, and ensuring providers follow robust security and confidentiality practices.

Data Retention

We retain personal data only as long as necessary for the purpose collected, to meet legal obligations, resolve disputes, and enforce agreements. Retention periods are designed to balance operational needs and privacy.

Account and registration information is typically retained for the duration of your relationship with mindpalova plus a period needed for administrative and legal purposes, generally no longer than 7 years for business records unless law requires otherwise.

Support requests and communications are retained for a period sufficient to handle inquiries, improve services, and for legal defense, typically up to 3 years unless otherwise required.

System logs and analytics data are retained in aggregated or pseudonymized form for performance monitoring; raw logs are retained for a limited period, commonly 90 to 180 days.

When personal data is no longer required, we securely delete, anonymize, or archive it in accordance with our retention schedule and applicable law.

Security Measures

We apply organizational, technical, and administrative measures to protect personal data. Security measures are regularly reviewed and updated to address new threats and to safeguard course participants, staff, and partners.

• Encrypted connections (HTTPS) for data in transit and access controls to limit system access to authorized personnel.
• Regular security assessments, software updates, and least-privilege access policies to reduce the risk of unauthorized access.
• Incident response procedures and employee training to detect, report, and remediate security events promptly.

Your Rights

You may exercise rights related to your personal data, including access, correction, deletion, restriction, portability, and objection to certain processing activities. Requests must be reasonable and proportionate.

• Access personal data we hold about you and request a copy of that data.
• Request correction of inaccurate or incomplete data.
• Request deletion of personal data when it is no longer needed for the original purpose.
• Object to processing based on legitimate interests, or opt out of direct marketing communications.
• Request restriction of processing while data concerns are verified or resolved.
• Request portability of data you provided in a structured, commonly used electronic format.
• Withdraw consent at any time where processing is based on consent, without affecting processing done prior to withdrawal.
• File a complaint with a relevant supervisory authority if you consider our processing unlawful or inconsistent with this policy.

How to Exercise Your Rights

To exercise your rights or make a data request, contact our privacy team by email via the contact form on mindpalova.info or by mail to our registered address. Provide sufficient details to verify your identity so we can process the request securely.

[email protected]

We will acknowledge receipt of your request promptly and aim to respond substantively within 30 days. Complex requests may require additional time; we will inform you if an extension is necessary.