Privacy Policy

1. Data We Collect

When you contact us through our website form or by email, we may collect your name, email address, and telephone number. We collect this information only as you provide it. We do not collect payment card data — any payments are handled in person at the workshop.

Our website uses cookies for basic analytics purposes. You may decline optional cookies through the cookie banner or through your browser settings. See our Cookie Policy for detail.

We collect this information on the basis of your consent (for enquiries and cookies) and to fulfil a service relationship (for appointment and service communications).

2. How We Use Personal Information

• To respond to enquiries about our services
• To arrange and manage service appointments
• To communicate service progress and collection readiness
• To comply with legal obligations where required
• To improve how our website functions, using anonymised analytics data

We do not use personal information for automated decision-making or profiling. We do not send unsolicited marketing communications. If you contact us and later wish to receive no further communications, you can say so at any time.

3. Data Sharing and Third Parties

We do not sell personal information. We do not share your data with third parties for marketing purposes.

We may share data with service providers who assist in operating our website (such as hosting and analytics providers). These providers are bound by confidentiality and data handling agreements and may not use your data for their own purposes.

If we are legally required to disclose information — for example, under a court order or regulatory obligation — we will do so to the extent required and no further.

4. Retention

Contact information and appointment records are retained for up to three years following the last contact or service. Website analytics data is retained in anonymised form. If you ask us to delete your information earlier, we will do so unless a legal obligation requires us to retain it.

5. Data Protection Measures

• Data transmitted through our website is encrypted via HTTPS
• Access to contact and appointment records is restricted to workshop staff with a need to see it
• Physical documents containing personal information are stored securely on-site
• In the event of a data breach affecting your information, we will notify you and the relevant authority as required by the PDPA

6. Cookies

We use essential cookies to make the site function, and optional analytics cookies to understand how visitors use our pages. No marketing or advertising cookies are used. You can manage your preferences through the banner that appears on your first visit or through our Cookie Policy page.

7. Your Rights

Under the PDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to retention obligations)
• Withdraw consent at any time for processing based on consent
• Object to processing based on legitimate interests
• Lodge a complaint with the Personal Data Protection Committee of Thailand

To exercise any of these rights, write to us at [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to external sites (such as Google Maps). We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

9. Children's Privacy

Our services are directed at adults. We do not knowingly collect information from persons under 18 years of age. If we become aware that we have inadvertently received such information, we will delete it.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with a revised date at the top. Continued use of our website after changes constitutes acceptance of the updated policy.

11. Contact

Data Controller: Lotus Hour

Address: 425 Ratchadamri Road, Pathum Wan, Bangkok 10330, Thailand

Privacy enquiries: [email protected]