Policy

Privacy policy

Last updated 1 Oct 2026

A sample policy under Thailand's PDPA (2019). Replace the [bracketed] text and have it checked before publishing.

Data controller

[Legal entity], [address], [email].

What we collect

Name, business name, phone, email, the service you're interested in and your message. Client accounting data is held separately under the service agreement [list analytics tools, if any].

Purpose and legal basis

To reply and prepare a quote — based on consent and steps taken at your request before a contract.

Retention

Enquiries that don't become clients: up to [12 months]. Client accounting records: as long as accounting and tax law requires.

Sharing

We never sell data. We share it with government agencies when filing on your behalf, and with necessary processors [provider names].

Your rights

Ask to access, correct or delete, object or withdraw consent at [DPO email], and complain to the Personal Data Protection Committee.