Privacy Policy

When you register for membership, sign up for our newsletter, register interest in events, or contact us, we collect: your full name, email address, country of residence, preferred language, membership tier, payment information (processed securely by our payment processor and not stored by us), and any other information you voluntarily provide in forms or correspondence.

When you visit our website, we automatically collect: IP address, browser type and version, operating system, referring URL, pages visited and time spent, device identifiers, and analytics data. This information is collected through cookies, web beacons, and similar tracking technologies. Please see Section 8 (Cookies) for more detail.

Some of our community activities may involve information that constitutes sensitive personal data under applicable law, including information about sexual orientation, gender identity, religious or philosophical beliefs, or health. We only collect such information where you have given explicit, freely given, specific, informed, and unambiguous consent, and we apply heightened security measures to protect it. You may withdraw consent at any time without detriment.

We may receive information about you from social media platforms if you choose to connect your account, from event co-organisers, or from publicly available sources, where permitted by applicable law.

We share information with trusted third-party service providers who assist us in operating our website and delivering our services, including payment processors, email delivery services, analytics providers, cloud hosting providers, and event management platforms. These providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.

Where you register for events co-organised with partner organisations, we may share relevant registration information with those partners solely for the purpose of managing your attendance. We will inform you of any such sharing at the time of registration.

We may disclose your information if required to do so by law, court order, or governmental authority, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and your rights in relation to it.

These cookies are essential for the website to function and cannot be switched off. They are set in response to actions you take, such as logging in or filling in forms. No consent is required for these cookies.

We use Umami Analytics, a privacy-friendly, GDPR-compliant analytics tool that does not use cookies and does not collect personally identifiable information. Aggregate usage data helps us understand how visitors interact with our website.

If you opt in to marketing communications, we may use cookies to personalise content and measure the effectiveness of our campaigns. You can withdraw consent at any time by adjusting your browser settings or contacting us.

If you are located in the EEA or UK, you have the right to lodge a complaint with your local supervisory authority. Our lead supervisory authority for GDPR purposes is the Thai Personal Data Protection Committee (PDPC) for Thailand-based processing. You may also contact the supervisory authority in your country of habitual residence. Our processing is based on the lawful bases described in Section 3 above.

California residents have specific rights under the CCPA as amended by the CPRA. We do not sell personal information. We do not share personal information for cross-context behavioural advertising. California residents may submit requests to know, delete, or correct their personal information, and to opt out of sharing, by contacting us at [email protected]. We will not discriminate against you for exercising your CCPA rights. For sensitive personal information, we only use or disclose it for the purposes set out in this Policy.

If you are located in Brazil, you have rights under the Lei Geral de Proteção de Dados (LGPD), including the right to confirmation of processing, access, correction, anonymisation, portability, deletion, information about sharing, and the right to revoke consent. Our legal bases for processing are as described in Section 3. You may exercise your rights by contacting our DPO at [email protected].

If you are located in Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access your personal information and challenge its accuracy. We obtain meaningful consent before collecting, using, or disclosing your personal information. You may withdraw consent subject to legal or contractual restrictions by contacting us.

As a Thai-headquartered organisation, we comply fully with the Personal Data Protection Act B.E. 2562 (2019) and its subordinate regulations. We collect personal data only for specified, explicit, and legitimate purposes. We obtain consent where required and provide data subjects with the rights described in Section 7. Our Data Protection Officer can be contacted at [email protected]. Complaints may be submitted to the Office of the Personal Data Protection Committee (PDPC).

For users in Singapore, we comply with the Personal Data Protection Act 2012 (PDPA) as amended. We have appointed a Data Protection Officer and implemented data protection policies and practices. You may contact our DPO at [email protected] to access, correct, or withdraw consent for the use of your personal data.

For users in Japan, we comply with the Act on the Protection of Personal Information (APPI). For users in South Korea, we comply with the Personal Information Protection Act (PIPA). In both cases, you have rights to access, correct, and delete your personal information, and to withdraw consent. Please contact us at [email protected] to exercise these rights.