Privacy Policy

1. Who We Are

Happy Pawn Chess Club is operated by Sébastien Ferrand, based in Bangkok, Thailand. We are the data controller for information collected through this website and our services. You can reach us at booking.happycademy@gmail.com or +66 62 363 6695.

2. What Data We Collect

Depending on how you interact with us, we may collect the following:

• Enquiry and booking forms: your name, email address, phone number, your child's first name and age, and any message you submit.
• Student app accounts: lesson history, points, tokens, HP rating, tournament results, and Lichess ID (if provided).
• Usage data: pages visited, browser type, and approximate location, collected automatically via Google Analytics (anonymised IP).

We do not collect payment card details directly.

3. How We Use Your Data

We use your data to:

• Respond to enquiries and confirm lesson bookings
• Send lesson feedback and progress reports to parents
• Manage student accounts, leaderboards, and tournament records
• Send event and tournament information (with your consent)
• Improve our website and services through anonymised analytics

We do not sell or share your personal data with third parties for marketing purposes.

4. Legal Basis (PDPA)

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), we process your data on the following bases:

• Contract performance — to deliver the lessons and services you book.
• Legitimate interests — to manage our business, improve our services, and communicate with you about your enrolment.
• Consent — for marketing communications and non-essential cookies. You may withdraw consent at any time.

5. Data Storage and Security

Student account data is stored in Google Firebase Firestore, hosted in the asia-south1 (Mumbai) region. All data transmitted to and from our website and API is encrypted via HTTPS. Contact form submissions are processed via our secure backend and delivered by email.

6. Third-Party Processors

We use the following trusted third-party services:

• Google Firebase — database and authentication (Google LLC)
• Google Analytics — anonymised website traffic analysis
• Google Cloud Run — our API server
• Lichess.org — public chess platform (Lichess profile data is fetched on your behalf if you provide a Lichess ID)

7. Data Retention

We retain your contact enquiry data for up to 2 years. Student account data is retained while your child is enrolled and for up to 1 year after. You may request deletion at any time (see Your Rights below).

8. Children's Privacy

We collect minimal information about children, and only with parental consent. Student names displayed publicly on our leaderboard use call names (nicknames), never full legal names. We do not knowingly collect data from children directly without a parent or guardian submitting it.

9. Cookies

This website uses minimal cookies. Google Analytics sets anonymised analytics cookies to help us understand how the site is used. We do not use advertising or tracking cookies. You can disable cookies in your browser settings at any time.

10. Your Rights

Under the PDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Withdraw consent for marketing communications at any time
• Request a portable copy of your data
• Object to processing based on legitimate interests

To exercise any of these rights, email us at booking.happycademy@gmail.com. We will respond within 30 days.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated to registered families by email before taking effect.