Privacy & Data Protection
CalmLabPeak collects and processes personal data to provide mindful leadership training and related services, manage client relationships, and operate this website at CalmLabPeak.link. We describe the types of data we handle, the purposes for processing, and the rights available to individuals. Our approach balances operational needs with respect for individual privacy and applicable legal requirements.
Definitions
This section explains key terms used in this policy to make our practices clearer, including what we mean by personal data, processing, the service, and cookies.
Data We Collect
We collect data you provide directly, information collected automatically when you interact with our services, and data from trusted third parties to deliver and improve our services.
Data You Provide
When you sign up, request a proposal, or communicate with us, you voluntarily provide information necessary to deliver services and manage relationships.
- Full name and professional role or organization
- Email address and contact phone number
- Business or organizational details and team size
- Billing and payment information submitted for invoicing
- Preferences, registration details, and feedback related to training sessions
- Communications and correspondence records when you contact our team
Automatically Collected Data
We also gather technical and usage data when you visit our site or use our services to maintain performance and safety.
- IP address and general geographic region
- Device type, browser, and operating system details
- Usage data such as pages visited, session duration, and feature interactions
- Referrer and navigation paths within CalmLabPeak.link
- Cookie identifiers and tracking vouchers
- Crash and diagnostic logs for site reliability
Third-Party Data Sources
In limited cases we receive data from third-party partners to facilitate service delivery or payment processing.
- Payment processors and invoicing partners for transaction details
- Analytics and hosting providers for site performance metrics
- Business partners or referral platforms when you engage via a partner channel
How We Use Data
We use collected data for the following lawful and operational purposes:
- To provide and manage training sessions, coaching, and event logistics
- To process payments, invoices, and administrative requests
- To communicate updates, schedules, and confirmations about your participation
- To improve our programs, tailor content, and maintain service quality
- To ensure site security, prevent abuse, and troubleshoot technical issues
- To comply with legal obligations and respond to lawful requests
- To conduct anonymized research and aggregated analysis to improve offerings
- To manage marketing communications when you opt in to receive them
Legal Bases for Processing
We rely on appropriate legal bases for processing personal data depending on the context and jurisdiction.
- Performance of a contract: processing necessary to deliver training and coaching you requested
- Consent: where you opt in to marketing communications or optional services
- Legitimate interests: for site security, fraud prevention, and service improvement while balancing individual rights
- Legal obligation: when we must process data to comply with laws or regulatory requests
GDPR and International Rights
If you are located in jurisdictions with data protection laws similar to the GDPR, you may have certain rights regarding your personal data. We act to support those rights where applicable.
- Right to access: you can request a copy of personal data we hold about you
- Right to rectification: you can ask us to correct inaccurate or incomplete data
- Right to erasure: you may request removal of personal data when processing is no longer necessary
- Right to restriction: you may request limitation of processing in specific circumstances
- Right to data portability: where applicable, request machine-readable copies of data you provided
- Right to object: you may object to certain processing based on legitimate interests or direct marketing
Data Sharing
We share personal data only as needed to operate services, fulfill contractual obligations, and meet legal requirements. Sharing is limited to trusted parties under confidentiality terms.
- Service providers who host and support our website and learning platforms
- Payment processors to handle billing and invoicing
- Analytics vendors to measure and improve site and program performance
- Legal or regulatory authorities when required by law
- Professional advisors and auditors under confidentiality obligations
- Affiliates and partners when you engage through a partner channel, with minimal necessary data
International Transfers
CalmLabPeak may transfer personal data to service providers or affiliates in other countries to deliver services and host systems. Transfers are managed with appropriate safeguards.
When data moves across borders we use contractual safeguards, technical protections such as encryption, and limited access controls to protect personal information.
Data Retention
We retain personal data for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements.
Account and client relationship information is retained while the account is active and for a period thereafter to meet administrative and legal needs; retention periods typically align with business and regulatory requirements.
Communications, registration records, and session logs are generally retained for a practical period (for example, several years) to support customer service and record-keeping.
Technical logs and diagnostics are retained for a limited period to maintain security and site reliability, often for months to one year depending on the type of log.
You can request deletion or restriction of personal data where applicable. We will assess requests and take reasonable steps to remove or anonymize data consistent with operational and legal requirements.
Security Measures
CalmLabPeak implements administrative, technical, and physical measures designed to protect personal data against unauthorized access, loss, or misuse. No system is perfect, but we apply industry-standard controls to reduce risk.
- Encryption of data in transit and where appropriate in storage
- Access controls and role-based permissions for internal systems
- Regular security reviews, patching, and monitoring of systems
Your Rights
To exercise your rights or make inquiries about personal data, please contact our team. We will verify identity and respond in a timely manner consistent with applicable law.
- Submit a request describing the action you want (access, correction, deletion, restriction, or portability) and provide proof of identity where required.
- Contact details: CalmLabPeak, Thanon Mittraphap, Nai Mueang Sub District, Amphoe Mueang Nakhon Ratchasima District, Nakhon Ratchasima Province 30000, Thailand. Phone: +66946549765. For data requests mention Business ID 8974856363759.
- Request correction of inaccurate personal data we hold about you, including profile details and communication preferences.
- Request deletion of personal data where it is no longer necessary for the purposes provided or where you have withdrawn consent.
- Request restriction of processing when you contest the accuracy of personal data or object to processing under certain conditions.
- Receive a copy of personal data you have provided in a commonly used, machine-readable format for portability to another service.
- Object to processing of your personal data for direct marketing purposes and to profiling related to such marketing.
- Complain to a supervisory authority if you believe our handling of your personal data does not comply with applicable law.
How to Exercise Your Privacy Rights
To exercise any of the rights listed above, please contact our privacy team with a clear description of your request. Provide enough detail so we can locate your records, such as the email used to register with CalmLabPeak, and a photocopy of a government-issued ID when identity verification is necessary. We aim to process straightforward requests efficiently while protecting personal data from unauthorized disclosures.
We will acknowledge receipt of your request within 10 business days. Where permitted by law, we typically respond with a completion or status update within 30 days. Complex requests may require additional time; if so, we will notify you and explain the reason for the delay and the expected timeframe.
Marketing Communications and Choices
CalmLabPeak may send newsletters, program updates, event invitations, and promotional offers tailored to your interests. We use your contact preferences to limit the frequency and types of messages. Marketing materials include clear information on how to opt out, and we respect all unsubscribe requests promptly. When you provide consent for targeted communications, you can withdraw consent at any time without affecting other services you receive from us.
To stop receiving marketing emails from CalmLabPeak, use the unsubscribe link at the bottom of any email or contact support. Processing unsubscribe requests typically takes up to 48 hours; meanwhile promotional messages may still be delivered for a short period.
Children and Minors
Our services and training programs are intended for adult professionals. We do not knowingly collect personal data from children under 18. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete the information as soon as practicable. Parents or guardians who believe their child’s information has been collected should contact our privacy team to request removal.
Third-Party Links and Services
CalmLabPeak pages may contain links or embedded content from third-party providers, such as payment processors or scheduling platforms. These third parties manage their own privacy practices; we encourage you to review their privacy policies before providing personal data. CalmLabPeak is not responsible for the data practices or content of external websites and services linked from our site.
Changes to This Privacy Notice
We periodically update our privacy notice to reflect operational, legal, or regulatory changes. When updates are material, CalmLabPeak will post the revised notice on our site and note the effective date. Continued use of our services after a change indicates acceptance of the updated terms. We recommend reviewing this notice periodically to stay informed about how your data is handled.