Privacy Policy

1. Data Controller

The data controller for personal data collected through this website is Sukhothai Works, operating from 17/3 Krabi Road, Talat Yai, Mueang, Phuket 83000, Thailand. For data-related enquiries, contact us at [email protected].

2. Personal Data We Collect

We collect personal data in the following circumstances:

• When you submit an enquiry through the contact form on our website: your name, email address, phone number (if provided), and the content of your message.
• When you correspond with us by email or telephone: the content of that correspondence and any contact details you provide.
• During consulting engagements: operational and business information relevant to the engagement, including details about your property, team, and operations.
• Automatically through our website: technical data including IP address, browser type, pages visited, and visit duration, collected via analytics cookies where you have consented.

3. Legal Basis for Processing

We process personal data on the following legal bases:

• Legitimate interest — for responding to enquiries and managing our consulting practice.
• Contract performance — for carrying out consulting engagements you have engaged us for.
• Consent — for analytics and marketing cookies, where you have provided consent through our cookie management controls.
• Legal obligation — where processing is required by applicable Thai or international law.

4. How We Use Personal Data

• To respond to enquiries submitted through the website or by other means.
• To carry out consulting engagements and associated administrative work.
• To maintain records of engagements as required for professional and legal purposes.
• To understand how our website is used, where you have consented to analytics cookies.
• To meet applicable legal and regulatory obligations.

5. Data Retention

Enquiry data that does not lead to an engagement is retained for a maximum of twelve months, after which it is deleted. Data related to completed engagements is retained for seven years from the close of the engagement for professional records and legal compliance purposes. You may request earlier deletion of your data subject to the conditions in Section 8.

6. Data Sharing

We do not sell personal data to third parties. We may share data in the following limited circumstances:

• With service providers who support our operations (such as email hosting or website hosting), under data processing agreements where applicable.
• Where required by law, regulation, or court order.
• With your explicit consent in any other circumstance.

Data from consulting engagements is subject to separate non-disclosure arrangements and is not shared outside the engagement.

7. Cookies

We use cookies on this website. Essential cookies are always active and support basic site functionality. Analytics, marketing, and preference cookies are optional and are only set where you have provided consent through our cookie controls. Please see our Cookie Policy for full details.

8. Your Rights

Under applicable data protection law, you have the following rights in relation to your personal data:

• The right to access personal data we hold about you.
• The right to correct inaccurate or incomplete personal data.
• The right to request deletion of your personal data, subject to our legal retention obligations.
• The right to restrict or object to processing of your personal data.
• The right to withdraw consent at any time, where processing is based on consent.
• The right to lodge a complaint with a relevant supervisory authority.

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty days.

9. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. Our website is served over HTTPS. Access to personal data is restricted to individuals who need it for the purposes described in this policy. In the event of a data breach that could affect your rights or interests, we will notify you without undue delay.

10. Third-Party Links

Our website may include links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of the page. Continued use of the website following any update constitutes acceptance of the revised policy.

13. Contact

For any questions about this Privacy Policy or the handling of your personal data, please contact:

Sukhothai Works
17/3 Krabi Road, Talat Yai, Mueang, Phuket 83000
[email protected]