Privacy Policy

Introduction

Vantara ("we," "our," or "us") is committed to protecting the privacy and security of personal information provided by our clients and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Thai data protection regulations and international best practices.

For questions regarding this policy or your personal data, please contact us at [email protected].

1. Information We Collect

1.1 Information You Provide

We collect personal information that you voluntarily provide when:

• Submitting contact forms or inquiry requests
• Engaging our consulting services
• Communicating with us via email or phone
• Subscribing to newsletters or updates

This may include: name, email address, phone number, company name, job title, and any information contained in messages you send us.

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain technical information:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on site
• Referral source and exit pages

This information is collected through cookies and similar tracking technologies as described in our Cookie Policy.

2. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To provide consulting services, respond to inquiries, and fulfill contractual obligations
• Communication: To send service-related communications, project updates, and respond to your questions
• Business Operations: To improve our services, analyze website usage, and manage our business relationships
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Marketing: With your consent, to send information about our services (you may opt out at any time)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary for performing our consulting services
• Consent: When you have given explicit consent for specific processing activities
• Legitimate Interests: For business operations, fraud prevention, and service improvement
• Legal Obligations: To comply with applicable laws and regulations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

4.1 Service Providers

Third-party vendors who assist with:

• Website hosting and maintenance
• Email communication services
• Analytics and performance monitoring
• Cloud storage and data processing

4.2 Legal Requirements

We may disclose personal information when required by law, court order, or to protect our rights and safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred to the acquiring entity.

5. Data Security

We implement appropriate technical and organizational measures to protect personal information:

• Encryption of data in transit and at rest
• Secure server infrastructure with regular security updates
• Access controls limiting data access to authorized personnel
• Regular security audits and vulnerability assessments
• Employee training on data protection and confidentiality

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy:

• Client Data: Retained for the duration of the consulting engagement plus seven years for legal and accounting purposes
• Inquiry Data: Retained for two years or until you request deletion
• Marketing Data: Retained until you withdraw consent or request deletion
• Website Analytics: Anonymized data retained for statistical analysis

7. Your Rights

Under Thai data protection law, you have the following rights:

• Access: Request access to your personal information we hold
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal information
• Restriction: Request limitation on how we use your data
• Portability: Request transfer of your data to another service provider
• Objection: Object to processing based on legitimate interests or direct marketing
• Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies and Tracking

Our website uses cookies to enhance user experience and analyze site performance. For detailed information about our cookie usage, please review our Cookie Policy.

You can manage cookie preferences through your browser settings or our cookie management tool.

9. Children's Privacy

Our services are directed at business professionals and organizations. We do not knowingly collect personal information from individuals under 18 years of age. If you believe we have inadvertently collected such information, please contact us immediately.

10. International Data Transfers

While we primarily operate within Thailand, some service providers may be located in other jurisdictions. When transferring data internationally, we ensure appropriate safeguards are in place through standard contractual clauses or other approved mechanisms.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through:

• Notice on our website
• Email notification to registered users
• Updated "Last Updated" date at the top of this policy

Continued use of our services after changes indicates acceptance of the updated policy.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

13. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand or other relevant supervisory authority in your jurisdiction.