Privacy Policy

1. Data Controller

The data controller for personal information collected through this website and through our services is:

2. Data We Collect

We collect personal data only when it is necessary for the purpose stated at the time of collection. This may include:

• Contact information — name, email address, and phone number submitted through our contact form or provided during service engagements.
• Business information — details about your organisation, workflows, and processes shared during advisory sessions. This information is used solely to provide the service.
• Website usage data — anonymised information about how visitors interact with this website, collected via analytics tools where consent has been given.
• Communications — emails and messages exchanged with us in connection with your enquiry or active engagement.

Legal basis for processing: Consent (website contact form); performance of a contract (active client engagements); legitimate interest (improving our services).

Retention: Contact enquiries are retained for 24 months. Client engagement records are retained for five years in line with Thai commercial practice, then securely deleted.

3. How We Use Your Data

• To respond to enquiries submitted through our contact form
• To deliver the advisory services described in our engagement agreement
• To produce written summaries and reports shared with you as part of our services
• To send you service-related communications (not marketing without separate consent)
• To comply with legal and regulatory obligations under Thai law

We do not sell personal data to third parties. We do not use client business information to train external AI models. Any third-party service used in connection with our services (such as analytics or cloud storage) is selected with data privacy as a consideration and is subject to a data processing agreement.

4. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. These include:

• Encryption of data in transit via HTTPS
• Access controls limiting who within our team can view client data
• Secure cloud storage with reputable providers
• Periodic review of data handling practices

In the event of a data breach that is likely to affect your rights or interests, we will notify you and, where required, the relevant authority, within the timeframes set out under Thai law.

5. Cookies

This website uses cookies. Essential cookies are necessary for the site to function. Optional cookies (analytics, marketing, preference) are only set with your consent. You can manage cookie preferences at any time via our Cookie Policy page.

6. Your Rights

Under Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA), you have the following rights regarding your personal data:

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are dissatisfied with our response, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

7. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their policies separately.

8. Children's Privacy

Our services are directed at businesses and business owners. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us so we can arrange its deletion.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. If changes are significant, we will notify active clients by email.

10. Contact for Data Enquiries

For any questions about this policy or your personal data, please contact: