MyChatterBox — Privacy Policy
Last Updated: [Insert Date]
1. Introduction
MyChatterBox ("MCB," "we," "us," or "our") operates an English fluency and conversation coaching service, including group sessions, one-on-one sessions, and Career Advancement programs (collectively, the "Services"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, book a consultation, or use our Services.
MyChatterBox is based in Thailand and this policy is drafted with reference to Thailand's Personal Data Protection Act (PDPA). [Placeholder — to be confirmed by legal counsel once the company is formally registered.]
By using our website or Services, you agree to the collection and use of information as described in this policy.
2. Information We Collect
2.1 Information You Provide Directly
- Contact information: name, email address, phone number
- Consultation/intake information: age, field of work, workplace, role, English usage context, speaking comfort level, budget expectations, availability, urgency of need
- Payment information: processed via Stripe and bank transfer (see Section 5 — we do not store full payment card details ourselves)
- Communications: messages sent to us via email, live chat, or consultation forms
- Session-related content: notes, feedback, or portfolio materials (e.g., recorded talks) generated during coaching sessions, where applicable
2.2 Information Collected Automatically
- Website usage data: pages visited, time on site, browser type, device type, IP address (via standard analytics tools)
- Cookies: [Placeholder — specify once analytics/marketing tools are finalized, e.g., Google Analytics, Meta Pixel]
3. How We Use Your Information
We use collected information to:
- Schedule and personalize consultations
- Recommend appropriate programs (Group, 101, or Career Advancement) and match mentors
- Process payments and issue invoices/receipts
- Communicate with you about your sessions, scheduling, and account
- Improve our curriculum, products, and Services based on aggregated, anonymized data
- Comply with legal and tax obligations
- Send program updates or promotional communications (only with consent, where required)
We do not sell personal information to third parties.
4. Legal Basis for Processing (Where Applicable)
Where required by applicable law, we process personal data based on:
- Your consent (e.g., for marketing communications)
- Performance of a contract (e.g., delivering the Services you've purchased)
- Legitimate business interests (e.g., improving our programs)
- Legal obligations (e.g., tax and financial recordkeeping)
5. Third-Party Service Providers
We share limited data with trusted third parties who help us operate:
| Provider | Purpose | Data shared | ||
|---|---|---|---|---|
Stripe | Payment Processing | Payment details, transaction amount, billing contact info | ||
[Bank name/placeholder] | Bank Transfer payments | Name, transfer reference, amount | ||
[Scheduling tool, e.g., Calendly] | Booking consultations/sessions | Name, email, availability | ||
[Email/CRM tool, if applicable] | Communication and consultation follow-up | Name, email, consultation notes |
These providers are only permitted to use your data to perform services on our behalf and are contractually obligated to protect it.
[Placeholder — full list to be finalized once all operational tools are confirmed.]
6. Data Retention
We retain personal information for as long as necessary to:
- Provide ongoing Services to active students
- Meet legal, tax, and accounting obligations under Thai law
- Resolve disputes and enforce our agreements
Returning student records (per our 12-month re-engagement policy) may be retained for up to [Placeholder — e.g., 24 months] after your last interaction, after which data may be archived or deleted upon request.
7. Your Rights
Depending on applicable law, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal/financial recordkeeping requirements)
- Withdraw consent for marketing communications at any time
- Request a copy of your data in a portable format
To exercise these rights, contact us at [Insert Contact Email].
8. Data Security
We take reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, or misuse, including:
- Restricted internal access to consultation and payment data
- Secure, private payment links (not publicly indexed)
- [Placeholder — encryption, storage practices once finalized]
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. International Data Transfers
MCB primarily serves students within Thailand and the surrounding region. If your data is transferred outside Thailand (e.g., via Stripe's international servers), we take steps to ensure it remains protected consistent with this policy.
10. Children's Privacy
Our Services are intended for adult learners and professionals. We do not knowingly collect personal information from individuals under 18. [Placeholder — confirm minimum age policy.]
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our Services after changes constitutes acceptance of the revised policy.
12. Contact Us
If you have questions about this Privacy Policy or how your data is handled, contact us at:
Email: [Insert Contact Email] Address: [Insert Business Address, once registered]
This document is a placeholder draft generated for internal planning purposes only. It must be reviewed and finalized by a qualified attorney familiar with Thailand's Personal Data Protection Act (PDPA) and any other applicable jurisdictions before publication.