✦ Anan Capital Contact Us

Legal & Data

Privacy Policy

Last updated:  ·  Effective date:

Anan Capital is committed to handling your personal information with care and transparency. This policy describes what data we collect when you use our website or enquire about our educational programmes, how we use it, how long we keep it, and what rights you have under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

If you have questions about anything in this document, please write to us at [email protected] before submitting any enquiry form.

1. Data Controller

The data controller responsible for the personal information described in this policy is:

Anan Capital 47 Silom Road, Suriyawong
Bangkok 10500, Thailand
Phone: +66 81 528 4716
Email: [email protected]

2. Data We Collect

We collect only what is necessary to respond to your enquiries and deliver our educational programmes. This typically falls into three categories:

Information you provide directly

  • Full name
  • Email address
  • Telephone number (if provided)
  • The content of messages or enquiries you send us
  • Programme preferences or questions about specific services

Information collected automatically

  • Browser type and version
  • Operating system
  • Pages visited and time spent on each page
  • Referring website address
  • IP address (anonymised where possible)
  • Cookie data (see Section 8)

Information from third-party services

If you reach us through a third-party platform (such as a social media referral), that platform may share limited profile data with us. We do not purchase contact lists or obtain data from brokers.

3. How We Use Your Data

We use the information we collect for these purposes:

  • Responding to enquiries — to answer questions about our reading programmes, workshops, and individual review sessions.
  • Service delivery — to schedule sessions, send pre-reading materials, and provide written summaries after completed programmes.
  • Administrative correspondence — to confirm bookings, share session logistics, and follow up after programmes.
  • Website improvement — to understand how visitors use our site so we can improve content and navigation.
  • Legal compliance — to meet our obligations under Thai law, including the PDPA, and to cooperate with lawful requests from regulatory bodies.

We do not sell your personal data. We do not use your data for automated decision-making that produces legal or similarly significant effects. We will not send you unsolicited marketing without your prior consent.

5. Retention Periods

We keep your data only as long as it is reasonably needed for the purpose for which it was collected:

  • Enquiry records — up to 12 months from last contact, unless a programme is booked.
  • Programme records — up to 5 years from the date of the last session, to support follow-up queries and to satisfy potential financial services record-keeping obligations.
  • Analytics data — aggregated and anonymised; individual session data deleted after 26 months.
  • Legal or compliance records — as required by applicable Thai law, up to 10 years.

When we no longer need your data, we delete or anonymise it. You may request earlier deletion — see Section 9.

6. Data Sharing

We do not share your personal data with third parties for their own marketing or commercial purposes. We may share data in the following limited circumstances:

  • Service providers — including our website host, email service, and analytics platform, who process data on our behalf under written data processing agreements and only for the purpose we specify.
  • Regulatory authorities — where we are required to do so by Thai law, court order, or a request from the Office of the Personal Data Protection Committee (PDPC).
  • Licensed investment educators — who co-facilitate specific programmes. Any such facilitator is bound by confidentiality obligations consistent with this policy.

Any international transfer of personal data outside Thailand complies with the cross-border transfer requirements of PDPA Section 28.

7. Security Measures

We take reasonable organisational and technical steps to protect the personal data we hold:

Encrypted transmission

All data submitted through our contact form is transmitted via HTTPS/TLS encryption.

Access controls

Personal data is accessible only to staff who need it for their role. Access is reviewed periodically.

Secure storage

Data is stored on servers located in facilities that maintain industry-standard physical and logical security.

Breach notification

In the event of a personal data breach likely to cause harm, we will notify the PDPC within 72 hours and affected individuals without undue delay, as required under PDPA Section 37.

8. Cookies

Our website uses cookies — small text files stored in your browser — to support basic functionality and to understand how the site is used. We use four categories:

  • Essential — required for the site to function; cannot be disabled.
  • Analytics — help us understand page visits and content performance (optional).
  • Marketing — support relevant advertising where applicable (optional).
  • Preferences — remember your settings across visits (optional).

You can adjust your cookie preferences at any time on our Cookie Policy page, which also contains instructions for managing cookies through your browser.

9. Your Rights

Under the PDPA, you have the following rights in relation to your personal data. We will respond to any request within 30 days.

✦ Right of access

You may request a copy of the personal data we hold about you, along with information about how it is used.

✦ Right to rectification

If any information we hold about you is inaccurate or incomplete, you may ask us to correct it.

✦ Right to erasure

You may ask us to delete your personal data where there is no longer a legitimate reason to retain it. We will comply unless a legal obligation requires us to keep it.

✦ Right to data portability

Where technically feasible, you may request a copy of data you provided to us in a structured, commonly used format.

✦ Right to object

You may object to processing based on legitimate interest. We will stop unless we can demonstrate compelling grounds that override your interests.

✦ Right to withdraw consent

Where we rely on your consent to process data, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

✦ Right to lodge a complaint

If you believe we have handled your data incorrectly, you may file a complaint with Thailand's Office of the Personal Data Protection Committee (PDPC) at pdpc.or.th.

To exercise any of these rights, contact us at [email protected]. We may ask you to verify your identity before acting on a request.

11. Children's Privacy

Our programmes are designed for adults aged 40 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted information through our site, please contact us at [email protected] and we will delete it promptly.

12. Policy Updates

We may update this policy from time to time, for example if the law changes or if we introduce new services. When we do, we will revise the "Last updated" date at the top of this page.

For material changes, we will make a brief notice available on our homepage for 30 days. Continued use of our website or services after an update constitutes acceptance of the revised policy.

13. Contact for Data Enquiries

For any question, request, or concern relating to personal data, please reach us by email. We aim to respond within five working days.

Data enquiries — Anan Capital Email: [email protected]
Phone: +66 81 528 4716
47 Silom Road, Suriyawong, Bangkok 10500, Thailand