Privacy Policy

1. Data Controller

Thong Atlas Co., Ltd. is the data controller for personal data collected through this website and our consulting engagements.

• Address: 127 Rama IV Road, Klong Toei, Bangkok 10110, Thailand
• Email: [email protected]
• Phone: +66 2 914 6283

2. Data We Collect

We collect personal data when you interact with our website or engage us for consulting services. This includes:

• Full name and contact information provided via enquiry forms
• Email address and phone number
• Company name, role, and nature of your enquiry
• Technical data such as IP address, browser type, and pages visited (via analytics cookies, if consented)
• Communication records from emails or calls

We do not collect sensitive personal data (as defined under the PDPA) through standard website interactions. Sensitive data within consulting engagements is governed by separate engagement agreements.

3. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA:

• Consent — for analytics and marketing cookies, and for email communications you have opted into
• Contract performance — to deliver consulting services to clients who have engaged us
• Legitimate interest — to respond to enquiries, maintain business records, and improve our services
• Legal obligation — where processing is required to comply with Thai law

4. How We Use Your Data

• Responding to enquiries submitted through the website contact form
• Delivering consulting services under agreed engagement terms
• Sending service-related communications (invoices, deliverables, scheduling)
• Improving our website based on aggregated analytics data
• Complying with applicable legal and regulatory obligations

We do not use personal data for unsolicited marketing communications and we do not sell personal data to third parties.

5. Data Sharing

We share personal data only in the following circumstances:

• With service providers who process data on our behalf (such as website hosting and email infrastructure) under appropriate data processing agreements
• With professional advisors (legal, accounting) where necessary and under confidentiality obligations
• With local partner firms to which clients have explicitly requested introductions
• Where required by Thai law or by a competent regulatory authority

6. Data Retention

We retain personal data for the following periods:

• Website enquiries not followed by an engagement: up to 12 months
• Client engagement records: 7 years from project completion, consistent with Thai accounting and record-keeping requirements
• Analytics data: as configured within our analytics platform, typically up to 26 months

After the applicable retention period, data is deleted or anonymized.

7. Cookie Use

This website uses cookies. Essential cookies are necessary for basic site functionality. Analytics and preference cookies are used only with your consent. For full information, please see our Cookie Policy.

8. Data Security

We maintain reasonable technical and organizational measures to protect personal data, including:

• Encrypted website communication (TLS/HTTPS)
• Access controls limiting data access to authorized staff
• Regular review of data handling practices

In the event of a data breach that affects your rights and freedoms, we will notify relevant authorities and affected individuals in accordance with PDPA requirements.

9. International Transfers

Where data is transferred to service providers outside Thailand (for example, cloud hosting services), we ensure appropriate safeguards are in place in accordance with PDPA cross-border transfer requirements.

10. Your Rights

Under the PDPA, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data where there is no legal basis for continued processing
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
• Right to lodge a complaint — with Thailand's Personal Data Protection Committee or other relevant supervisory authority

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11. Children's Privacy

Our services are directed at business professionals and organizations. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received data from a minor, please contact us immediately.

12. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page indicates when the policy was most recently revised. Continued use of this website following any update constitutes acceptance of the revised policy.

14. Contact for Privacy Matters

For any questions, requests, or concerns relating to this Privacy Policy or your personal data, please contact:

• Email: [email protected]
• Post: Thong Atlas Co., Ltd., 127 Rama IV Road, Klong Toei, Bangkok 10110, Thailand