Privacy policy
Privacy Policy
Last Updated: 25.1.2026
1. Introduction
Welcome to KPG Podcast ("we," "us," or "our"). We operate the website https://www.kpgpodcast.com (the "Site") and a physical recording and photography studio located in Koh Phangan, Thailand.
We are committed to protecting your personal data and your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website, book our services, or visit our studio premises. We adhere strictly to the Personal Data Protection Act B.E. 2562 (2019) ("PDPA") of Thailand and, where applicable, international standards such as the GDPR.
By using our Site or services, you acknowledge the terms of this Privacy Policy.
2. Who is the Data Controller?
The Data Controller responsible for your personal data is:
KPG Podcast
Email: [Insert Email Address]
Phone: +66(0)6-1020-4290
3. What Personal Data Do We Collect?
We collect data to provide our premium recording and photography services effectively. This data falls into the following categories:
3.1 Data You Provide to Us Directly
Identity Data: First name, last name, and nickname/alias.
Contact Data: Email address, telephone number, and WhatsApp ID.
Booking Data: Appointment dates, times, and specific service requests (e.g., "Podcast Recording," "Headshots").
Content Data: Any information you voluntarily provide during the recording process, including your voice, image, and the content of your discussions, which may include personal opinions.
Financial Data: Payment confirmation details. Note: We do not store full credit card numbers on our servers; payments are processed by third-party secure gateways.
3.2 Data We Collect Automatically
When you visit kpgpodcast.com, we may automatically collect:
Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and platform.
Usage Data: Information about how you use our website, including pages visited, time spent on pages, and click-through patterns.
3.3 Data Collected at Our Physical Studio
CCTV Footage: If you visit our studio, your image may be captured by our security cameras for the safety of our premises and equipment.
Multimedia Recordings: Audio and video files created during your booked session.
4. Why Do We Process Your Data? (Legal Basis)
Under the Thai PDPA, we only process your data when we have a lawful basis to do so.
Purpose of ProcessingType of DataLegal BasisTo facilitate bookings and provide servicesIdentity, Contact, Booking DataContract: Processing is necessary to fulfill the service agreement you make with us.To communicate with you regarding your sessionContact DataContract: We need to send you confirmations, files, and invoices.To produce your podcast or photosContent Data (Voice/Image)Contract: This is the core service we provide.To improve our website and customer experienceTechnical, Usage DataLegitimate Interest: It is in our interest to ensure our website functions correctly and to understand our audience.To ensure security (CCTV)CCTV ImagesLegitimate Interest: Preventing crime and protecting our property.To send marketing updates (Newsletter)Contact DataConsent: We will only send you marketing emails if you have opted in.To comply with tax and legal obligationsFinancial, Identity DataLegal Obligation: We must retain transaction records for Thai Revenue Department compliance.
5. How We Use "Sensitive" Data
Generally, we do not strictly collect "Sensitive Personal Data" (such as race, religion, political views, health data) as defined by Section 26 of the PDPA during the booking process.
However, during a podcast recording, you may choose to express views related to politics, religion, or other sensitive topics. By engaging in the recording service, you acknowledge that this data is captured as part of the content production contract. If we intend to use snippets of such sensitive content for our own marketing, we will obtain your explicit consent.
6. Cookies and Tracking Technologies
Our website uses cookies to distinguish you from other users. This helps us provide you with a good experience and allows us to improve our site.
Essential Cookies: Required for the operation of the website (e.g., booking forms).
Analytics Cookies: Allow us to recognize and count the number of visitors (e.g., Google Analytics).
You can set your browser to refuse all or some browser cookies. However, if you disable or refuse cookies, some parts of this website may become inaccessible or not function properly.
7. Disclosure of Your Personal Data
We may share your data with the following third parties strictly for the purposes outlined above:
Service Providers: Third-party companies that help us operate, such as:
Booking Platforms: (e.g., Calendly, Acuity)
Cloud Storage Providers: (e.g., Google Drive, Dropbox) for delivering your files.
Payment Processors: (e.g., Stripe, PayPal, Banking Apps).
Professional Advisers: Lawyers, accountants, and insurers.
Legal Authorities: If required by Thai law or a court order.
We ensure that all third parties respect the security of your personal data and treat it in accordance with the law. We do not sell your data to advertisers.
8. International Data Transfers
As a modern digital business, some of our service providers (like Google or cloud hosts) may be located outside of Thailand. In such cases, we ensure that the transfer of your data complies with the PDPA, typically by ensuring the destination country has adequate data protection standards or by using standard contractual clauses.
9. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for.
Booking & Financial Records: Retained for at least 5 years to comply with Thai tax laws.
Raw Recording Files: Retained for a limited period (e.g., 6 months) as a backup service to you, after which they may be deleted to manage storage capacity. You are responsible for downloading and archiving your own content.
Marketing Data: Retained until you unsubscribe or withdraw consent.
10. Your Rights Under the PDPA
Under the Thai PDPA, you have the following rights regarding your personal data:
Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Portability: Request transfer of your data to another controller.
Right to Object: Object to processing based on legitimate interests or direct marketing.
Right to Erasure: Request deletion of your data (subject to legal retention obligations).
Right to Restrict Processing: Suspend the use of your data in certain scenarios.
Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at [Insert Email]. We will respond to legitimate requests within 30 days.
11. Security of Your Data
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. This includes secure passwords for our digital systems, restricted access to studio computers, and the use of encryption where possible.
12. Changes to This Privacy Policy
We may update this policy from time to time to reflect changes in the law or our business practices. The latest version will always be posted on this page.