Privacy policy

About this policy

In this policy, “House of Om”, “we”, “our” and “us” means the company that operates House of Om Sanctuary Bangkok. We are the data controller of your personal data and comply with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (the “PDPA”).

We may update this policy from time to time. The current version will always be published on our website, and we will notify you of significant changes by email or through our booking platform.

When you book a pass or a class, visit the sanctuary, use our website or contact us, we handle your personal data as described in this policy.

1. What personal data we collect

• Identity and contact: name, date of birth, gender, phone, email, LINE ID, nationality. From you, when you sign up, book or contact us.
• Account and booking: booking history, attendance, passes and reserved workshops, promo codes, class packs, membership status, waitlist activity. From our booking platform and this website.
• Payment: billing details, payment method and transaction history. Card details are handled by our payment processors: WooCommerce with PromptPay for Thai payments, and WeTravel with Stripe for international cards. From you and our payment processors.
• Health (sensitive data): injuries, medical conditions, pregnancy, information in a health or intake form. From you, with your explicit consent.
• Photos and video: studio photography and filming, photos, video and live-streaming at our events, CCTV footage. From our team and our cameras.
• Communications and feedback: messages, enquiries, survey responses (including the optional questions before payment: what describes you, the area or country where you live, and the services that interest you), reviews, and how you heard about us. From you.
• Website and device: IP address, browser type, pages visited, cookie data. From our website and analytics tools.
• Marketing preferences: newsletter sign-ups, opt-ins and opt-outs, including your “Yes, keep me posted” or “No thanks” answer when you book. From you.

Health data. Health information is “sensitive data” under the PDPA. We only collect it with your explicit consent, and only to keep you safe in class, for example so a teacher or facilitator can suggest modifications. We do not collect other sensitive data, such as religious beliefs or biometric data, unless you choose to share it and consent.

Children. Anyone under 20 is a minor under Thai law. We only collect a minor’s personal data with the consent of their parent or legal guardian.

CCTV. We use CCTV in reception and common areas for safety and security. Cameras are not placed in changing rooms or bathrooms.

2. Why we use your data and our legal basis

Under the PDPA we may only use your personal data when we have a lawful basis. The table shows each purpose and the basis we rely on.

Where we rely on consent, you can withdraw it at any time by contacting us. Withdrawing consent does not affect anything we did before you withdrew it. If you choose not to give data we need for a contract, such as your contact details, we may not be able to provide our services.

Photos and filming at the grand opening. There will be live-streaming, photography and video recording during the weekend, for our website and social media. If you do not want to appear, tell the registration table when you arrive. You will be given a special lanyard so our media team keeps you out of frame. If you would like a published image of you removed, contact us.

3. Who we share your data with

We never sell your personal data. We share it only where needed, with:

• Our team: teachers, facilitators and staff, who see only what they need for their role. Teachers and facilitators see health notes relevant to your class.
• Service providers: our booking platform and website, payment processors (WooCommerce, WeTravel and Stripe), email and messaging tools, website hosting, cloud storage and accountants. They may only use your data to provide services to us and must protect it.
• Social media and advertising platforms: only where you have consented to marketing, or as described in our cookies section.
• Authorities and advisers: government agencies, police, courts or professional advisers when the law requires it, or to protect the safety and rights of our guests, students, team or business.
• A new owner: if our business is sold or restructured, your data may transfer to the new owner, who must continue to protect it under this policy.

Overseas transfers. Some providers may store data outside Thailand. When this happens, we make sure appropriate safeguards are in place as required by the PDPA.

4. Cookies

Our website uses cookies and similar tools to make the site work, remember your preferences and understand how visitors use it. Where required, we ask for your consent before setting non-essential cookies. You can block or delete cookies in your browser settings, although some features may then stop working.

On this website, analytics cookies are used only if you select “Accept cookies”, and you can change your choice at any time.

Change your cookie choice

5. How we protect and keep your data

We use reasonable technical and organisational safeguards to protect your data from loss, misuse and unauthorised access. These include password-protected systems, staff access limited by role, and trusted providers.

We keep personal data only as long as we need it:

• Account and booking records: while you are an active student or guest, then 2 years after your last visit.
• Payment and tax records: for the period required by Thai law, generally 5 to 10 years.
• Health information: while you are an active student, then deleted within 12 months.
• CCTV footage: 30 days, unless needed for an incident.
• Marketing data: until you unsubscribe or withdraw consent.

If we experience a data breach that risks your rights, we will notify the Personal Data Protection Committee and, where required, you, within the time limits set by law.

6. Your rights

Under the PDPA, you have the right to:

• Access your personal data and get a copy of it.
• Correct data that is inaccurate, incomplete or out of date.
• Delete your data, or have it anonymised, in certain circumstances.
• Object to us using your data, including for direct marketing at any time.
• Restrict how we use your data in certain circumstances.
• Port your data, receiving it in a commonly used electronic format or having it sent to another organisation.
• Withdraw consent at any time where we rely on consent.
• Complain to the Personal Data Protection Committee if you believe we have breached the PDPA.

To exercise any right, contact us using the details below. We may need to verify your identity first. We aim to respond within 30 days. If we cannot fully meet a request, for example because the law requires us to keep certain records, we will explain why.

To stop marketing messages, use the unsubscribe link in any email or tell us directly.

7. Contact us

For questions about this policy or your personal data, contact House of Om Sanctuary Bangkok:

• Privacy contact: LINE @houseofom
• Phone and WhatsApp: +66 92 593 0392
• Address: 189 Soi Prachan Khadi, Khlong Tan Nuea, Watthana, Bangkok 10110

If you are not satisfied with our response, you can contact Thailand’s Personal Data Protection Committee (PDPC).

This privacy policy was last updated on 4 November 2026.