Privacy Policy

Introduction

Dataveil is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, disclose, and protect personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

This policy applies to personal data collected through our website, consultation services, and business operations. By engaging with our services, you acknowledge that you have read and understood this Privacy Policy.

For questions regarding this policy or our data protection practices, please contact us at [email protected]

Data Collection Information

Personal Data We Collect

We collect the following categories of personal data:

• Contact information including name, email address, phone number, and business address
• Company information including organization name, position, and industry sector
• Communications with us including inquiry content and correspondence
• Website usage information including IP address, browser type, and pages visited

How Data is Collected

Personal data is collected through:

• Contact forms submitted on our website
• Email communications and consultation requests
• Service engagement and consultation processes
• Cookies and similar technologies on our website

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: When you provide consent for specific processing purposes
• Contract: To fulfill contractual obligations for services provided
• Legitimate Interests: For business operations and service improvement where not outweighed by your rights
• Legal Obligation: To comply with applicable laws and regulations

Data Retention

Personal data is retained for the duration necessary to fulfill the purposes for which it was collected. Contact information from inquiries is retained for 2 years from last contact. Service engagement data is retained for 7 years in accordance with business record requirements. Marketing communications data is retained until consent is withdrawn.

Data Usage Explanation

How We Use Personal Data

We use personal data for the following purposes:

• Responding to inquiries and consultation requests
• Providing assessment, documentation, and planning services
• Communicating about services, updates, and relevant information
• Improving our website and service delivery
• Complying with legal and regulatory requirements

Third-Party Sharing

We do not sell personal data to third parties. Personal data may be shared with:

• Service providers who assist with website hosting, email communications, and business operations
• Professional advisors including legal and accounting services as necessary
• Regulatory authorities when required by law

All third parties are bound by confidentiality obligations and data processing agreements ensuring appropriate data protection measures.

Marketing Communications

We may send service updates and relevant information to contacts who have engaged with our services. You may opt out of marketing communications at any time by contacting [email protected] or using unsubscribe links in communications.

Data Protection Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit using secure protocols (HTTPS/TLS)
• Access controls limiting data access to authorized personnel only
• Secure storage systems with regular security assessments
• Confidentiality agreements with all personnel handling personal data
• Regular review and update of security measures

Data Breach Procedures

In the event of a data breach that may affect your rights and freedoms, we will notify the Personal Data Protection Committee within 72 hours of becoming aware of the breach. Affected individuals will be notified where the breach poses high risk, in accordance with PDPA requirements.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyze website usage. Cookies are small text files stored on your device.

Types of Cookies Used

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Help us understand how visitors use our website
• Preference Cookies: Remember your settings and choices

You can manage cookie preferences through our Cookie Policy page or your browser settings. Disabling certain cookies may affect website functionality.

For detailed information about cookies we use and how to manage them, please review our Cookie Policy.

Your Rights as a Data Subject

Under Thailand's PDPA, you have the following rights regarding your personal data:

• Right of Access: Request confirmation of whether we process your personal data and obtain a copy of such data
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of personal data in certain circumstances
• Right to Restriction: Request restriction of processing in certain situations
• Right to Data Portability: Receive personal data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for processing at any time where consent is the legal basis

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with your request. We will respond within 30 days as required by PDPA.

You also have the right to lodge a complaint with the Personal Data Protection Committee if you believe our processing of your personal data violates PDPA requirements.

International Data Transfers

Personal data is primarily stored and processed within Thailand. Where data must be transferred outside Thailand for business purposes, we ensure appropriate safeguards are in place including:

• Transfer to countries with adequate data protection standards as determined by Thailand's Personal Data Protection Committee
• Implementation of standard contractual clauses for data protection
• Obtaining your explicit consent where required

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a minor without appropriate consent, we will delete such information promptly.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We recommend reviewing the privacy policies of any third-party websites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through our website or via email to contacts in our database.

Continued use of our services after policy changes indicates acceptance of the updated policy. We recommend reviewing this policy periodically to stay informed of our data protection practices.