Privacy Policy

1. Who we are (Data Controller)

This website (cadence.co.th) is operated by Megha Jindal, doing business as Cadence, based in Pathum Wan, Bangkok, Thailand. For the purposes of Thailand's Personal Data Protection Act B.E. 2562 (2019) (the "PDPA") and equivalent laws in other jurisdictions, Megha Jindal is the Data Controller responsible for personal data collected through this site and through coaching engagements.

Privacy contact: privacy@cadence.co.th
General contact: megha@cadence.co.th

2. What data we collect

2.1 Information you give us directly

• Contact details — name, email, phone, organization, role, and the message you send us through the contact form, email, or LinkedIn.
• Booking details — when you book a trial session through Calendly, we collect the time you book, your name and email, and any answers you provide to intake questions about your goals.
• Newsletter subscription — if you sign up for our newsletter, we collect your email address.
• Coaching engagement data — once you become a client, we collect the information needed to coach you: notes from sessions, written exercises you submit, recordings of practice talks (with your separate written consent), and feedback you share with us.
• Billing details — name, billing address, VAT/tax ID (if applicable). Payment card details are handled by our payment processors (e.g., Stripe, Omise) and are not stored by Cadence.

2.2 Information collected automatically

• Essential cookies — small bits of data stored in your browser that are necessary for the site to function (e.g., remembering your cookie consent choice).
• Optional cookies (only with your consent) — third-party tools we may use, such as embedded scheduling (Calendly) or analytics. These do not load until you click "Accept" on the cookie banner.
• Server logs — our hosting provider (Netlify) keeps standard access logs (IP address, browser type, pages requested, timestamps) for security and reliability purposes.

2.3 Information we do not collect

• Sensitive personal data (e.g., race, religion, health, sexual orientation, biometric data) — unless you voluntarily share it during coaching, and even then only with your separate, explicit consent.
• Children's data — Cadence is a service for adults (18+) and is not intended for children.

3. Why we use your data (Legal Basis)

4. How long we keep your data

• Enquiry emails / contact form messages — up to 24 months from your last contact, unless we have an active engagement.
• Coaching engagement records (notes, written work) — up to 5 years after your engagement ends, then deleted, unless we agree otherwise with you in writing.
• Recordings of your practice talks — by default, deleted within 90 days of your last session, unless you ask us to keep them longer.
• Invoices and financial records — kept for 7 years to meet Thai accounting and tax requirements.
• Newsletter subscription — kept until you unsubscribe (one click in every email).
• Website server logs — kept by our hosting provider for up to 30 days.

5. Who we share your data with

We do not sell or rent your personal data. We share data only with carefully selected service providers we use to run Cadence — and only with the minimum data they need to do their job. Our current key processors are:

Each of these providers is bound by their own data processing terms and is required to keep your data secure. We will only add new processors when necessary, and we will update this list when we do.

5.1 Cross-border transfers

Several of our processors are based in the United States or operate global infrastructure. Under Thailand's PDPA cross-border transfer rules (effective March 2024), we ensure appropriate safeguards are in place — typically through the data protection terms each provider publishes (Standard Contractual Clauses, certifications, or equivalent commitments). If you would like a copy of these safeguards for any specific processor, email privacy@cadence.co.th.

6. How we keep your data secure

• The website is served exclusively over HTTPS with industry-standard TLS encryption.
• Email is hosted on Google Workspace with two-factor authentication (2FA) enabled.
• Coaching session notes and recordings are stored in access-controlled folders, with strict limits on who can view them.
• We use a password manager and unique passwords for every system. We never share credentials.
• We sign Non-Disclosure Agreements (NDAs) with every coaching client before any engagement begins.
• We delete data when we no longer need it, in line with the retention periods above.

7. Your rights under the PDPA

Thailand's PDPA gives you specific rights over your personal data. You can exercise any of these by emailing privacy@cadence.co.th:

• Right to be informed — about how we use your data (this policy).
• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct data that is inaccurate or out of date.
• Right to erasure — ask us to delete your personal data (subject to legal retention obligations).
• Right to restrict processing — ask us to pause certain uses of your data.
• Right to data portability — receive a structured copy of data you provided to us.
• Right to object — object to certain uses of your data (e.g., direct marketing).
• Right to withdraw consent — at any time, where we rely on your consent to process your data.

We aim to respond to all requests within 30 days. If you are not satisfied with our response, you may also file a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

8. Cookies and tracking

When you first visit Cadence, you'll see a cookie banner with two equal-weight buttons: Accept and Reject. We do not load any non-essential cookies until you explicitly accept.

You can change your choice at any time by clearing your browser's site data for cadence.co.th, which will re-display the consent banner.

9. Children's privacy

Cadence is intended for adults aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a child's data has been submitted to us, please contact privacy@cadence.co.th and we will delete it.

10. Changes to this policy

We may update this Privacy Policy as our practices evolve. The "Last updated" date at the top will reflect the most recent revision. For material changes (e.g., a new processor that handles your data), we will give clear notice — typically by email to active clients and a banner on this page.

11. Questions?

We genuinely welcome privacy questions. Email privacy@cadence.co.th with anything that's unclear, and we'll get back to you in plain language within a few days.