Who We Are and What This Covers

Prog-plan operates from Thailand and provides budget prioritization tools and educational resources to help individuals and organizations manage their finances more effectively. When we say "we," "us," or "our," we're referring to Prog-plan located at 40 3340, Bo Kwang Thong, Bo Thong District, Chon Buri 20270, Thailand.

This policy applies to information we collect through prog-plan.com, our educational programs, and any related services. If you're sharing financial data with us or participating in our learning programs, you deserve to know exactly what happens to your information.

Information We Collect

Being transparent about data collection matters to us. Here's what we gather and why we need it:

Information You Provide Directly

• Account details including your name, email address, and phone number when you register for our services
• Financial information such as budget categories, spending patterns, and financial goals you input into our tools
• Program enrollment data when you sign up for our learning programs scheduled throughout 2025 and 2026
• Communication records when you contact us at contact@prog-plan.com or call +6627598481
• Payment information processed through secure third-party payment processors (we don't store complete card details)

Information Collected Automatically

• Device information including IP address, browser type, and operating system
• Usage data such as pages visited, features used, and time spent on our platform
• Cookies and similar tracking technologies (you can control these through your browser settings)
• Location data based on your IP address to provide region-appropriate content

How We Use Your Information

Your data serves specific purposes that directly benefit your experience with our services. We use the information we collect to:

• Provide and improve our budget prioritization tools and ensure they work effectively for your needs
• Personalize your experience by offering relevant financial insights based on your spending patterns
• Communicate important updates about your account, service changes, or upcoming educational programs
• Process transactions securely and maintain accurate financial records
• Analyze usage patterns to identify areas where our tools can be enhanced
• Comply with legal obligations under Thai law and international regulations
• Protect against fraud, unauthorized access, and other security threats
• Send educational content and program updates if you've opted in to receive them

We base our data processing on several legal grounds including your consent, contractual necessity, legitimate interests, and legal compliance requirements under the PDPA.

Data Sharing and Third Parties

We're selective about who we share your information with. Here are the only circumstances where your data might be shared:

Service Providers

We work with trusted third-party companies that help us operate our platform. These include cloud hosting providers, payment processors, and email service providers. They only access the information necessary to perform their services and are contractually obligated to protect your data.

Legal Requirements

Sometimes we're legally required to disclose information. This happens when we receive valid legal requests from Thai authorities, need to enforce our terms of service, or must protect the rights and safety of our users and the public.

Business Transfers

If Prog-plan merges with another company or is acquired, your information would be transferred as part of that transaction. We'd notify you before this happens and explain any changes to how your data is handled.

Your Privacy Rights Under Thai Law

Thailand's PDPA gives you significant control over your personal data. You have the right to:

• Access: Request a copy of all personal information we hold about you
• Correction: Ask us to correct inaccurate or incomplete data
• Deletion: Request deletion of your data when it's no longer necessary for the purposes we collected it
• Portability: Receive your data in a structured, commonly used format to transfer to another service
• Objection: Object to processing of your data for specific purposes
• Restriction: Request that we limit how we use your information
• Withdrawal of Consent: Withdraw consent for data processing at any time (though this may limit service functionality)

To exercise any of these rights, contact us at contact@prog-plan.com. We'll respond to your request within 30 days as required by Thai law. Some requests may require identity verification to protect your security.

Data Security Measures

Protecting your financial information is our top priority. We implement multiple layers of security:

• Industry-standard encryption (TLS 1.3) for all data transmitted between your device and our servers
• Encrypted storage for sensitive financial data at rest
• Regular security audits and vulnerability assessments conducted quarterly
• Restricted access controls ensuring only authorized personnel can access personal data
• Multi-factor authentication options for your account protection
• Regular backups stored in secure, geographically distributed locations
• Employee training on data protection and privacy best practices

Despite our best efforts, no system is completely secure. If we detect a data breach that affects your information, we'll notify you within 72 hours as required by Thai law and take immediate steps to mitigate any harm.

Data Retention and Deletion

We don't keep your data forever. Here's how long we retain different types of information:

When you request account deletion, we'll remove your personal information within 30 days except for data we're legally required to retain. Some anonymized data may be kept for statistical purposes but can't be linked back to you.

International Data Transfers

Our primary servers are located in Thailand, but some of our service providers operate globally. When your data is transferred outside Thailand, we ensure it receives equivalent protection through:

• Standard contractual clauses approved by Thai data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for multinational service providers
• Your explicit consent where required by law

We only transfer data internationally when necessary to provide our services and always with appropriate safeguards in place.

Cookies and Tracking Technologies

Like most websites, we use cookies and similar technologies. Here's what you should know:

Essential Cookies

These are necessary for the website to function. They enable basic features like page navigation and access to secure areas. The website can't function properly without them.

Analytics Cookies

We use these to understand how visitors interact with our website. This helps us improve user experience and identify technical issues. The data collected is aggregated and anonymous.

Functionality Cookies

These remember your preferences and choices to provide enhanced, personalized features. For example, they remember your language preference or budget display settings.

You can control cookies through your browser settings. Blocking certain cookies may limit website functionality. Our cookie settings panel lets you customize your preferences at any time.

Children's Privacy

Our services are designed for adults managing personal or organizational budgets. We don't knowingly collect information from individuals under 18 years old without parental consent. If you're a parent and believe your child has provided us with personal information, contact us immediately at contact@prog-plan.com and we'll delete it.

Our educational programs scheduled for late 2025 and 2026 may include participants aged 16-17 with verified parental consent, handled separately with additional protections.

Changes to This Privacy Policy

We update this policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you through email or a prominent notice on our website at least 30 days before the changes take effect.

The "Last Updated" date at the top of this policy shows when it was most recently revised. Continuing to use our services after changes become effective means you accept the updated policy.

Complaints and Regulatory Authority

If you're not satisfied with how we've handled your privacy concerns, you have the right to file a complaint with Thailand's Personal Data Protection Committee. However, we'd appreciate the opportunity to resolve your concerns directly first.

You can reach the Thai PDPC through their official channels, though we encourage you to contact us first so we can address your concerns promptly and directly.