Privacy Policy

Who is responsible for your data

The data controller is:

• Name: [to be provided: legal name of the gym owner]
• Registration / tax ID: [to be provided: registration / tax ID]
• Address: [to be provided: registered address]
• Email: Cochasan.muaythai1@gmail.com

What data we collect

When you send the booking form, we receive:

• your name;
• your contact: WhatsApp number, phone number or email address;
• the preferred date and the plan you chose, if you filled them in;
• your message;
• the language of the page you used and your consent to this policy.

Please do not include sensitive data, such as health information, in the form. If you have an injury, tell the coach in person.

When you visit the website, our hosting provider processes technical data, such as your IP address, browser type and the pages requested, to deliver the website and protect it from abuse (for example, to limit how often the form can be sent). The website does not use cookies, analytics or advertising trackers, and does not load content from other websites.

Why we use it and on what basis

• To answer your request and arrange your training. Basis: taking steps at your request before an agreement (PDPA section 24(3)) and your consent given in the form (section 19).
• To keep the website working and secure. Basis: our legitimate interests (section 24(5)).

We do not use your data for advertising and do not sell it.

Who receives your data

• Resend, Inc. (USA): the email service that delivers your request to our mailbox.
• Cloudflare, Inc. (USA): hosts the website and processes the technical data described above.
• Our email provider: stores the request email in our mailbox.

These providers process data on our behalf. We share data with public authorities only when the law requires it.

Transfers outside Thailand

Resend and Cloudflare may process data in the United States and other countries. We use providers that offer contractual data protection commitments, and by sending the form you consent to this transfer (PDPA sections 28–29).

How long we keep it

The website does not store your request: it only passes it on by email. We keep request emails in our mailbox only as long as needed to reply and arrange your training, and no longer than 12 months, then delete them. Technical data is kept by the hosting provider for a short time under its own policy.

Your rights

Under the PDPA you can:

• access your data and get a copy;
• ask us to correct it;
• ask us to delete, destroy or anonymise it;
• ask us to restrict its use;
• object to its use;
• receive it in a commonly used format or have it sent to another controller;
• withdraw your consent at any time. This does not affect what we did before you withdrew it;
• complain to the Office of the Personal Data Protection Committee (PDPC), Thailand.

To use these rights, write to Cochasan.muaythai1@gmail.com. We aim to reply within 30 days.

Children

Bookings for the kids class should be sent by a parent or guardian. If you are under 20, please ask a parent or guardian to send the request for you.

Changes to this policy

We may update this policy. The date at the top shows the current version.