Privacy Policy

1. Introduction

Ruangrit ("we", "our", or "us") is a business consulting practice registered and operating in Bangkok, Thailand. We are committed to handling your personal information with care and transparency, in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and other applicable data protection legislation.

This Privacy Policy describes what personal data we collect, why we collect it, how we use and protect it, and the rights you have regarding your information. If you have questions, please contact us at privacy@ruangrites.

2. Personal Data We Collect

We collect personal data that you provide to us directly through our website contact form, email enquiries, or during advisory engagements. This may include:

• Full name and job title
• Email address and telephone number
• Organisation name and business address
• Information you share about your business situation in correspondence or during engagements

We also collect technical data automatically through website cookies and analytics tools, including your IP address, browser type, device, and pages visited. Please refer to our Cookie Policy for details.

Legal basis for processing: We process your personal data based on your consent (for marketing and analytics cookies), the performance of a contract or pre-contractual steps (for enquiry and engagement data), and our legitimate interests (for security and improving our website).

3. How We Use Your Data

We use the personal data we collect to:

• Respond to your enquiries and arrange introductory conversations
• Deliver advisory services you have engaged us for
• Fulfil our contractual obligations during active engagements
• Send relevant communications about your engagement or follow-on advisory
• Comply with legal and regulatory obligations
• Maintain the security and functionality of our website

We do not use your personal data for automated decision-making or profiling, and we do not sell your personal data to third parties.

Data retention: We retain enquiry data for up to 12 months. Engagement-related data is retained for seven years to meet applicable legal and tax requirements in Thailand. You may request deletion of your data subject to these requirements.

4. Sharing Your Data

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers: We use third-party tools for email, website hosting, and analytics (such as Google Analytics). These providers process data on our behalf and are bound by appropriate data processing agreements.
• Legal compliance: We may disclose personal data where required by Thai law or a competent authority.
• Business transfer: In the event of a sale or restructuring of Ruangrit, personal data held may be transferred as part of that process, with appropriate safeguards.

We do not transfer personal data outside Thailand unless appropriate safeguards are in place to maintain equivalent protections.

5. Data Protection Measures

We take the security of your personal data seriously. Our measures include:

• Encrypted data transmission (SSL/TLS) across our website
• Access controls limiting who within Ruangrit can view personal data
• Secure storage practices for both digital and physical documents
• Regular review of our data handling procedures

In the event of a data breach that is likely to result in risk to your rights, we will notify you and the relevant supervisory authority in accordance with PDPA requirements.

6. Cookies

Our website uses cookies to function properly and to help us understand how the site is used. Essential cookies are always active. Analytics and marketing cookies are only used with your consent, which you may withdraw at any time. For full details, please see our Cookie Policy.

7. Your Rights

Under the Thailand PDPA, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where we have no overriding legal basis to retain it.
• Right to data portability: Request your data in a structured, commonly used format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw any consent you have previously given, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@ruangrites. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies independently.

9. Children's Privacy

Our services are directed to organisations and business professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data through our site, please contact us and we will remove it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For significant changes, we will post a notice on our website. Continued use of our website after changes constitutes acceptance of the revised policy.

11. Contact Us

For any questions, concerns, or data rights requests relating to this Privacy Policy: