Introduction and Scope

This section defines terms used in the policy so you can easily understand what types of information we mean when we refer to personal data, processing, and services.

We collect data to enroll participants, process payments, deliver course content, manage accounts, and improve the quality of our executive awareness and focus offerings. Data collection is kept to what is necessary for these purposes and to meet legal or contractual obligations related to payments and records.

When you register, contact us, or purchase a program, you provide information that allows us to create and manage your account, complete transactions, and communicate relevant updates and resources.

• Full name and professional details (job title, organization) used to tailor course recommendations and certificates.
• Contact information such as email address and phone number (+66993650676) used for confirmations, reminders, and essential communications about your enrollment.
• Billing and payment information submitted through our payment processor to complete purchases and issue receipts.
• Profile and survey responses, including learning preferences and feedback provided to improve course content and scheduling.
• Documentation for identity verification or compliance where required, such as invoicing details and company information.
• Support correspondence and notes created during interactions with our team to resolve requests or manage your participation.

Some information is collected automatically when you interact with soullabfocus.vip or use our digital services. This data helps us operate the site securely and diagnose issues.

• Technical data such as IP address, device type, browser, and operating system to ensure compatibility and detect misuse.
• Usage data including pages visited, session duration, and interaction events used to improve navigation and course delivery.
• Performance and error logs to diagnose problems and maintain stable access to learning materials.
• Analytics data collected via third-party providers to understand aggregate trends and measure program engagement.
• Location data inferred from IP address for regional compliance and service customization.
• Cookie and similar tracking identifiers to remember preferences and support secure authentication.

We may receive data about you from trusted third parties when you use integrated services or choose to link external accounts. Such information is handled in accordance with this policy.

• Payment processors and business institutions that provide transaction confirmations and fraud screening.
• Analytics and hosting providers that supply aggregated usage statistics and platform reliability services.
• Corporate partners or referrals that share contact or company information when you sign up through a partner channel.

We use personal data to deliver the services you request, maintain operations, and continuously improve the Soullabfocus experience. Processing is limited to specified, legitimate purposes listed below.

• To register and manage user accounts and provide access to enrolled executive awareness and focus courses.
• To process payments, issue invoices, and handle tax or legal recordkeeping related to course purchases.
• To deliver course materials, schedule sessions, and send confirmations and reminders.
• To personalize content and recommendations based on role, learning history, and stated preferences.
• To analyze platform usage and improve course design, delivery, and user experience.
• To communicate relevant updates, administrative notices, and optional marketing about new programs or offers when you have consented to receive such messages.
• To detect and prevent fraud, abuse, or other harmful activity affecting our users and systems.
• To comply with legal obligations, respond to lawful requests from authorities, and protect Soullabfocus rights.

Depending on the processing activity, we rely on one or more legal bases such as performance of a contract, consent, legitimate interests, or compliance with legal obligations.

• Contract performance: processing necessary to deliver services you have requested, including access to courses and billing.
• Consent: where you have expressly agreed to receive marketing communications or optional features.
• Legitimate interests: for platform administration, fraud prevention, and improvements where those interests are not overridden by your rights.
• Legal obligation: processing required to meet tax, business reporting, or regulatory duties.

Cookies and similar technologies are used to provide essential site functionality, measure performance, and remember user preferences. You can control cookie settings through your browser or device.

We use session cookies for basic site functions, persistent cookies for preferences, analytics cookies to measure usage, and optional advertising cookies where relevant to promotional activities.

Categories include: essential (required for login and course access), performance (analytics and site metrics), functional (preferences and language), and advertising (where you consent to targeted communications).

To manage cookies, adjust your browser settings to block or delete cookies, or use privacy controls on your device. Disabling some cookies may limit functionality such as saved preferences or single sign-on.

Cookie Policy

We share personal data only as necessary to fulfill the purposes described, with trusted service providers and under legal obligations. We take steps to limit access and require partners to handle data responsibly.

• Service providers that deliver hosting, analytics, and customer support on our behalf.
• Payment processors and banks that facilitate transactions and refunds.
• Professional advisors and auditors where disclosure is necessary for compliance or business reporting.
• Legal or governmental authorities when required to respond to lawful requests or to protect legal rights.
• Affiliated entities or business partners in the event of a corporate restructuring, merger, or sale, subject to protective measures.
• Marketing platforms if you consent to receive promotional communications and choose to opt into related services.

Data may be transferred to and processed in countries outside your own, including locations where our service providers operate. We take steps to ensure adequate protection when data leaves the originating jurisdiction.

Safeguards for transfers can include standard contractual clauses, contractual commitments with subprocessors, and technical controls such as encryption and access restrictions to protect your personal data.

We retain personal data only for as long as necessary to provide services, meet legal obligations, and resolve disputes. Retention periods vary by type of data and operational needs.

Account information is retained while your account is active and for a limited period after account closure to address billing, tax, or legal matters. Typical retention periods may extend up to 24 months after account termination for administrative purposes.

Correspondence with our support team and essential communications are retained to maintain service records and ensure consistent support. Non-essential marketing messages are retained only as long as you remain subscribed.

System logs and diagnostic records are kept for operational and security reasons for a period consistent with our monitoring needs, then archived or deleted in line with our retention schedules.

When retention periods expire or upon verified request where applicable, we delete or anonymize personal data unless retention is required by law. Deletion processes are carried out in a timely manner in accordance with internal procedures.

We implement administrative, technical, and physical measures designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. Security is reviewed regularly to keep pace with evolving risks while enabling reliable course delivery.

• Encryption of data in transit and at rest for sensitive information and authentication credentials.
• Access controls and role-based permissions to limit data access to authorized personnel only.
• Regular security assessments, monitoring, and incident response practices to identify and address potential vulnerabilities promptly.

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the processing of your personal data. We provide mechanisms to exercise these rights and will respond in accordance with applicable law.

• Right of access: request confirmation of whether we process your personal data and obtain a copy of relevant information.
• Right to rectification: request correction of inaccurate or incomplete personal data.
• Right to erasure and restriction: request deletion of personal data or limit its processing where permitted by law.
• Right to object and portability: object to certain processing activities and request transfer of your data to another provider in a structured format where applicable.
• Right to restriction of processing: You may request limits on how we process your personal data when you contest accuracy or object to processing for a period required to verify your request.
• Right to data portability: Where applicable, you can request a copy of personal data you provided in a commonly used, machine-readable format for use with another service.
• Right to object: You have the right to object to processing based on our legitimate interests or for direct marketing; we will review and respond in accordance with applicable law.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting processing conducted prior to withdrawal.

We recognize the importance of privacy protections under the EU General Data Protection Regulation (GDPR). Although Soullabfocus operates from Thailand, we have implemented policies and controls to respect data subject rights when GDPR applies to individuals in the European Economic Area.

GDPR may apply if you are located in the European Economic Area and you interact with Soullabfocus services or provide personal data to us while in the EEA. Where GDPR applies, we follow its principles including purpose limitation, data minimization and lawfulness of processing.

• Lawful basis: We process personal data only when we have a lawful basis such as consent, contract performance, legal obligation or legitimate interests that do not override your rights.
• Data minimization: We limit the collection of personal information to what is relevant and necessary for the purposes described in this policy.
• Accountability: Soullabfocus maintains records and technical safeguards to demonstrate our compliance with applicable data protection obligations.
• International transfers: When personal data is transferred outside the EEA, we rely on appropriate safeguards such as standard contractual clauses or other legal mechanisms to protect your information.

If you are located in the EEA and believe we have not complied with applicable GDPR obligations, you may contact us directly using the contact details below. You also have the right to lodge a complaint with a supervisory authority in your member state.

To exercise any of your privacy rights (access, correction, erasure, restriction, objection, portability), submit a request to our privacy team. We will verify your identity before processing requests to protect your privacy and security.

[email protected]

We aim to acknowledge receipt of a valid privacy rights request within 7 business days and to respond substantively within 30 calendar days. If more time is needed due to complexity, we will inform you and provide an expected timeline.

We may use your contact details to send relevant news, course updates, event invitations and promotional offers. Marketing communications are designed to help you make informed decisions about executive awareness and focus training options.

You can opt out of marketing messages at any time by using the unsubscribe link in emails, adjusting preferences in your Soullabfocus account, or by contacting us directly. Opting out will not affect transactional messages related to your bookings or account.

Our services are designed for adults and professionals. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a minor, contact us so we can delete the data promptly.

Our website may include links to third-party sites and partner booking platforms. We are not responsible for their privacy practices. Please review the privacy policies of third parties before providing your personal information.

We may update this privacy information to reflect changes in law, service features or operational practices. Material changes will be posted on soullabfocus.vip with an updated effective date so you can review what has changed.