Privacy Policy

1. Who We Are

Data Controller: Krung Pivot

Address: 78 Phahonyothin Road, Chatuchak, Bangkok 10900, Thailand

Contact: [email protected] · +66 2 548 9213

2. Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: Name, email address, phone number, and business affiliation provided via our contact form or direct correspondence.
• Communication records: Content of messages, emails, and notes exchanged during the course of an engagement enquiry or active engagement.
• Technical data: IP address, browser type, pages visited, and time on site — collected through website analytics tools when you consent.
• Cookie data: Preferences and session data stored in accordance with your cookie consent choices.

We do not collect sensitive personal data (such as health, financial account, or biometric data) through our website.

3. How We Collect Data

• Directly from you via the contact form on our website
• Through email correspondence and telephone calls
• Automatically through website analytics (only with your consent)
• Through cookies and similar technologies (see our Cookie Policy)

4. Why We Process Your Data (Legal Basis)

• Consent (Section 19, PDPA): For analytics and marketing cookies, and for sending promotional communications, where you have opted in.
• Contractual necessity: To respond to your enquiry, conduct engagement scoping, and fulfil a consulting engagement you have entered into.
• Legitimate interests: To improve our services, maintain records, and conduct security monitoring — where these interests do not override your rights.
• Legal obligation: Where required by Thai law or regulation.

5. How We Use Your Data

• To respond to enquiries and schedule initial conversations
• To conduct, manage, and deliver consulting engagements
• To send relevant updates about our services (where you have consented)
• To improve the functionality and content of our website
• To comply with legal and regulatory requirements

6. Data Sharing

We do not sell your personal data to third parties. We may share your data with:

• Service providers: Hosting and email service providers who process data on our behalf under contractual data processing agreements.
• Analytics providers: Where you have consented to analytics cookies (e.g. Google Analytics).
• Legal authorities: Where required by Thai law or a valid legal process.

Any third-party processors are required to maintain appropriate security standards and may not use your data for their own purposes.

7. Data Retention

• Enquiry contact data: Retained for 24 months from last contact, then deleted or anonymised.
• Engagement records: Retained for 5 years from engagement closure, in line with standard business record-keeping practice.
• Analytics data: Retained as configured in analytics tools (typically 14 months).
• Cookie consent logs: Retained for 12 months.

8. Data Security

We apply reasonable technical and organisational measures to protect your personal data, including:

• TLS encryption for data transmitted via our website
• Access controls restricting data to the relevant team members
• Secure, hosted infrastructure with regular security reviews
• Confidentiality obligations for all personnel with data access

In the event of a data breach that affects your rights, we will notify the relevant supervisory authority and affected individuals in accordance with PDPA requirements.

9. Cookies

Our website uses cookies for essential functionality and, with your consent, for analytics purposes. Please see our Cookie Policy for full details and to manage your preferences.

10. Your Rights Under the PDPA

As a data subject under Thailand's PDPA, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no lawful basis to retain it.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Withdraw consent at any time where processing is consent-based, without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to review their policies before sharing personal data.

12. Children's Privacy

Our services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has submitted data through our site, please contact us and we will remove it promptly.

13. Supervisory Authority

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand. Contact information is available at the Official PDPC website.

14. Changes to This Policy

We may update this policy periodically to reflect changes in our practices or applicable law. Material changes will be noted on this page with a revised "Last Updated" date. Continued use of our website following such changes constitutes acceptance of the updated policy.

15. Contact Us

For any privacy-related questions or to exercise your rights:

• Email: [email protected]
• Phone: +66 2 548 9213
• Post: 78 Phahonyothin Road, Chatuchak, Bangkok 10900, Thailand