Privacy Policy

1. Introduction

Baan Panya ("we", "us", "our") is committed to protecting the personal information of individuals who interact with our website and consulting services. This Privacy Policy explains what data we collect, how we use it, and the rights you hold in relation to that data. Our operations are based in Bangkok, Thailand, and this policy is written in compliance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

For questions about this policy, contact us at: [email protected]

2. Data We Collect

We may collect the following categories of personal information:

• Contact information: Name, email address, and telephone number — provided when you submit our contact form or contact us directly.
• Business information: Organization name, role, and details about your business context — shared during engagement discussions.
• Website usage data: IP address, browser type, pages visited, and time on site — collected automatically through cookies and analytics tools.
• Communication records: Emails and messages exchanged with our team as part of engagement discussions or client support.

We collect data only where there is a lawful basis for doing so — typically consent, contractual necessity, or legitimate business interest.

3. How We Use Your Data

Personal data is used for the following purposes:

• Responding to enquiries and initial consultation requests
• Preparing and delivering consulting engagements
• Managing our contractual relationships and invoicing
• Improving our website and understanding how it is used
• Complying with applicable legal and regulatory obligations

We do not sell personal data. We do not use personal information for unsolicited marketing without prior consent.

4. Data Retention

Contact enquiries that do not lead to an engagement are retained for up to 12 months. Data related to active or completed consulting engagements is retained for 5 years from the end of the engagement, in line with standard professional records practice. Analytics data is retained in aggregated, anonymised form.

5. Data Protection Measures

We store data on secure servers with access controls limited to authorized personnel. Communication containing personal or confidential information is encrypted in transit. We conduct periodic reviews of data handling practices. In the event of a data breach that may affect your rights, we will notify affected individuals within the timeframes required by Thai law.

6. Third-Party Services

We may use third-party analytics services (such as Google Analytics) to understand website usage. These services may collect anonymized data through cookies. We do not share personally identifiable information with third-party analytics providers. For a full list of cookies used, see our Cookie Policy.

7. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any external site you visit.

8. Your Rights Under Thai PDPA

Under Thailand's Personal Data Protection Act, you have the following rights in relation to your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data in certain circumstances.
• Right to restrict processing: Request that we limit the way we use your data.
• Right to data portability: Request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.
• Right to lodge a complaint: Lodge a complaint with the Personal Data Protection Committee of Thailand if you believe your rights have not been respected.

To exercise any of these rights, contact: [email protected]. We will respond within the timeframe required under Thai PDPA (generally 30 days).

9. Children's Privacy

Our consulting services are directed at businesses and professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that such data has been collected, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last Updated" date at the top of this page. Continued use of our website after an update constitutes acceptance of the revised policy. For material changes, we will provide more prominent notice where appropriate.

11. Contact

For any questions or requests related to your personal data: