Privacy Policy

1. Introduction

Thara Mongkol ("we," "us," or "our"), operating from 27 Thappraya Road, Nongprue, Pattaya 20150, Thailand, is committed to handling your personal data with care and in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand.

This Privacy Policy explains how we collect, use, store, and protect the personal information you share with us — and what rights you hold in relation to that data. If you have questions, contact us at [email protected].

2. Data Collection

We collect personal data when you interact with our website or contact us directly. The categories of data we may collect include:

• Full name and business name
• Email address and telephone number
• Business address and registration details (where relevant to engagement)
• Information provided voluntarily in enquiry forms or consultation sessions
• Technical data from website visits — IP address, browser type, pages visited (via analytics)

Data is collected through website contact forms, direct email or telephone communication, and cookies or analytics tools as described in our Cookie Policy.

3. Legal Basis for Processing

We process your data on the following legal grounds under the PDPA:

• Consent — where you have expressly agreed to data collection (e.g., contact form submission)
• Contractual necessity — where processing is required to deliver consulting services you have engaged us for
• Legitimate interests — where we have a reasonable business interest, such as improving our services or preventing fraud
• Legal obligation — where we are required to retain certain records by Thai law

4. How We Use Your Data

• Responding to enquiries and assessing service fit
• Delivering agreed consulting services
• Sending service-related communications (invoices, milestone updates, deliverable handovers)
• Improving our website and service offerings based on usage patterns
• Complying with legal and regulatory obligations

We do not sell personal data to third parties. We do not use your data for automated decision-making or profiling.

5. Data Retention

We retain personal data for as long as is necessary for the purposes for which it was collected. As a general guide:

• Enquiry data (no engagement): up to 12 months from last contact
• Client engagement data: up to 7 years from engagement close, in line with Thai commercial record-keeping requirements
• Analytics data: typically aggregated or deleted within 26 months

6. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data against loss, misuse, and unauthorised access. These measures include:

• Encrypted data transmission (TLS/HTTPS)
• Access controls limiting data to authorised team members only
• NDAs as standard with all team members and contractors
• Secure document handling protocols, particularly for due diligence engagements
• Regular review of data handling procedures

In the event of a data breach likely to affect your rights or interests, we will notify you and, where required, the relevant supervisory authority as soon as reasonably practicable.

7. Cookies

Our website uses cookies to function correctly and to help us understand how visitors use the site. Full details of the cookies we use and how to manage your preferences are set out in our Cookie Policy.

8. Third-Party Services

We may use the following third-party services that may process data collected from website visitors:

• Google Analytics — website usage analytics (may set cookies)
• Google Maps — embedded location map on our homepage
• Email service providers — for communication purposes

Each third party operates under its own privacy policy. We encourage you to review those policies if you have concerns about third-party data handling.

9. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights in relation to your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data where there is no lawful basis for continued processing
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
• Right to lodge a complaint — with the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. External Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.

11. Children's Privacy

Our services are intended for business clients and individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our website, please contact us and we will take appropriate steps to remove it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be noted on this page with an updated "Last Updated" date. Continued use of our website following a change constitutes acceptance of the revised policy.

13. Contact

For privacy-related questions or to exercise your rights:

• Email: [email protected]
• Address: 27 Thappraya Road, Nongprue, Pattaya 20150, Thailand
• Phone: +66 38 427 583