Privacy Policy

1. Introduction

garudahelmes ("we," "our," or "us") is committed to protecting the privacy and personal data of individuals who interact with our services, website, and communications. This Privacy Policy explains how we collect, use, store, and protect your personal information in connection with our business consulting services.

This policy applies to all personal data we process, whether collected through our website, via email or telephone communications, through our contact forms, or during the course of a consulting engagement. If you have questions about this policy, you may reach us at [email protected].

2. Data We Collect

We may collect the following types of personal data depending on how you interact with us:

Contact Information: Name, email address, phone number, and business address, typically provided when you submit a form on our website or contact us directly.

Professional Information: Job title, company name, and industry sector, collected to understand your business context and tailor our services appropriately.

Communications Data: Records of correspondence between you and our team, including emails, messages submitted through our contact form, and notes from telephone conversations.

Website Usage Data: Information about how you use our website, including pages visited, time spent on pages, and browser type, collected through cookies and analytics tools.

Engagement Data: Information shared during consulting engagements, which may include business performance data, organizational structures, and operational details as relevant to the services provided.

3. Legal Basis for Processing

We process your personal data on the following legal grounds, in accordance with Thailand's Personal Data Protection Act (PDPA):

Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as receiving communications from us.

Contractual Necessity: Where processing is necessary for the performance of a contract between you and garudahelmes, or to take steps at your request before entering into a contract.

Legitimate Interest: Where processing is necessary for our legitimate business interests, such as improving our services, provided those interests do not override your fundamental rights and freedoms.

Legal Obligation: Where processing is required to comply with Thai law or regulations.

4. How We Use Your Data

We use your personal data for the following purposes: responding to inquiries and contact form submissions, providing consulting services as agreed, sending relevant service information when you have consented to receive it, improving our website and service quality, complying with legal and regulatory requirements, and protecting our legitimate business interests.

We do not sell or rent your personal data to third parties. We do not use your personal data for automated decision-making or profiling.

5. Data Sharing

We may share your personal data with trusted third parties only when necessary:

Service Providers: We may engage third-party providers for website hosting, email services, and analytics. These providers are contractually obligated to protect your data and use it only for the purposes we specify.

Legal Requirements: We may disclose personal data if required by law, regulation, or legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We would notify you before your data becomes subject to a different privacy policy.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact form submissions and inquiry records are retained for up to 24 months after the last communication. Client engagement data is retained for 5 years following the completion of the engagement, in line with professional standards and legal requirements. Website analytics data is retained for 26 months before automatic deletion.

When personal data is no longer needed, it is securely deleted or anonymized.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls limiting data access to authorized personnel, regular security reviews of our systems and processes, and secure storage of physical documents.

In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, as required by the PDPA.

8. Cookies

Our website uses cookies to improve your browsing experience and to understand how visitors use our site. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Your Rights

Under the PDPA, you have the following rights regarding your personal data:

Right of Access: You may request a copy of the personal data we hold about you.

Right to Rectification: You may request correction of inaccurate or incomplete personal data.

Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected.

Right to Data Portability: You may request transfer of your personal data to another organization in a commonly used format.

Right to Object: You may object to processing of your personal data based on legitimate interests.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

10. Third-Party Links

Our website may contain links to external websites that are not operated by us. We are not responsible for the privacy practices of these third-party sites. We encourage you to review the privacy policies of any external websites you visit through links on our site.

11. Children's Privacy

Our services are intended for individuals who are at least 18 years of age. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a minor, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we are protecting your data.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

garudahelmes
159/3 Ratchadaphisek Road, Din Daeng, Bangkok 10400
Email: [email protected]
Phone: +66 2 274 8361