Privacy Policy

WhaleWealth ("we," "our," "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information in compliance with Thailand's Personal Data Protection Act (PDPA).

1. Information We Collect

We collect the following types of information:

1.1 Information You Provide

• Account Information: Name, email address, phone number, password
• Profile Information: Avatar, bio, social media links
• Payment Information: Bank account details, PromptPay ID (processed securely via payment providers)
• Vendor Information: Store name, business details, tax ID
• Communication: Messages, support tickets, feedback

1.2 Information Collected Automatically

• IP address and device information
• Browser type and version
• Pages visited and features used
• Course progress and learning activity
• Purchase and transaction history
• Cookies and similar tracking technologies

2. How We Use Your Information

We use your data for the following purposes:

• Providing, maintaining, and improving the platform
• Processing purchases and payments
• Sending order confirmations and account notifications
• Providing customer support
• Personalizing your learning experience and product recommendations
• Detecting and preventing fraud
• Complying with legal obligations under Thai law
• Sending marketing communications (with your consent)

3. Data Sharing

We share your personal data only in these circumstances:

• Vendors: When you purchase a product or course, the vendor receives your name and email to deliver the content
• Payment Providers: To process your payments securely (e.g., Omise, PromptPay)
• Analytics: Aggregated, anonymized data for platform analytics
• Legal: When required by law, court order, or government regulation

We do not sell your personal data to third parties.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. After account deletion, we may retain certain data for up to 5 years as required by Thai tax and business regulations.

5. Your Rights (PDPA)

Under Thailand's PDPA, you have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Restriction: Request restriction of data processing
• Portability: Request your data in a portable format
• Objection: Object to processing of your data
• Withdrawal: Withdraw consent at any time

To exercise these rights, contact us at [email protected].

6. Cookies

We use cookies and similar technologies to enhance your experience. Essential cookies are required for the platform to function. Analytics and marketing cookies are used with your consent. You can manage cookie preferences in your browser settings.

7. Security

We implement industry-standard security measures to protect your data, including:

• SSL/TLS encryption for all data in transit
• Encrypted password storage using bcrypt hashing
• Regular security audits and monitoring
• Access controls and role-based permissions

8. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If we discover that we have collected data from a child under 18, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the platform. Your continued use of the Service after changes constitutes acceptance.

10. Contact

For privacy-related questions or concerns, contact our Data Protection Officer at [email protected] or visit our Contact page.