Privacy Policy | lotusprakitas

lotusprakitas ("we," "us," or "our"), operating from 77 Ratchadamri Road, Lumpini, Pathum Wan, Bangkok 10330, Thailand, is committed to handling personal information with care and in compliance with applicable law, including Thailand's Personal Data Protection Act B.E. 2562 (PDPA). This policy explains what personal data we collect, why we collect it, and how we protect it.

If you have questions about this policy or how we handle your data, please contact us at [email protected].

1. What Personal Data We Collect

We collect personal data in the following ways:

Contact form submissions: name, email address, phone number (optional), and any message you choose to include.
Direct communications: data included in emails or phone calls initiated by you.
Engagement-related data: for clients, information shared during onboarding and engagement delivery, including organisational details and role information.
Website analytics: anonymised browsing behaviour, device type, and general location via analytics cookies where you have consented.

We do not collect sensitive personal data (such as health, financial, or biometric data) through our website.

2. Legal Basis for Processing

We process personal data on the following legal grounds:

Consent: for marketing communications and analytics cookies, where you have given us explicit consent.
Contractual necessity: to fulfil our obligations to clients engaged in a service relationship with us.
Legitimate interest: to respond to enquiries, improve our services, and maintain records of business communications, where these interests do not override your rights.
Legal obligation: where required by Thai law or applicable regulation.

3. How We Use Your Data

To respond to enquiries submitted via our contact form or by phone or email.
To deliver and manage engagement services for client organisations.
To send updates or newsletters where you have subscribed and given consent.
To understand how our website is used and improve its content (where analytics consent is given).
To comply with our legal and regulatory obligations.

We do not sell personal data to third parties. We do not use personal data for automated decision-making that produces significant effects on individuals.

4. Data Retention

We retain personal data for as long as necessary for the purposes set out in this policy:

Contact enquiry data: up to 24 months from last contact, unless an engagement relationship follows.
Client engagement data: up to 7 years from engagement close, in line with Thai accounting and record-keeping requirements.
Marketing consent records: retained until consent is withdrawn.
Analytics data: as configured by our analytics provider, typically 14 months.

5. Data Sharing and Third Parties

We share personal data only in the following circumstances:

Service providers: we use third-party services for website hosting, email delivery, and analytics. These providers act as data processors under written agreements and are permitted to use data only to provide services to us.
Legal requirements: we will disclose data if required by Thai law, court order, or lawful government authority.
Business transfers: in the event of a merger or acquisition, personal data may be transferred as part of that process, subject to equivalent privacy protections.

We do not transfer personal data outside of Thailand to jurisdictions without adequate data protection, unless appropriate safeguards are in place.

6. Cookies

We use cookies on our website to support basic functionality and, where you consent, to collect analytics data. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

7. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

Encrypted data storage and transmission (HTTPS).
Access controls limiting data to staff with a legitimate need.
Regular review of our data handling practices.
Procedures for identifying and responding to data breaches, including notification to the relevant supervisory authority where required under the PDPA.

8. Your Rights Under the PDPA

As a data subject under Thailand's Personal Data Protection Act, you have the following rights:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of data where we no longer have a legal basis to retain it.
Right to restrict processing: to request that we limit how we use your data in certain circumstances.
Right to data portability: to receive your data in a structured, machine-readable format where processing is based on consent or contract.
Right to object: to object to processing based on legitimate interests.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee if you believe your rights have not been respected.

9. Third-Party Links

Our website may contain links to external sites not operated by lotusprakitas. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

10. Children's Privacy

Our services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received data from a minor, please contact us at [email protected] and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. Significant changes will be communicated on this page with an updated "Last Updated" date. Continued use of our website after a change constitutes acceptance of the revised policy.

12. Contact

For all privacy-related enquiries or to exercise your data rights, contact us at:

Email: [email protected]
Address: 77 Ratchadamri Road, Lumpini, Pathum Wan, Bangkok 10330, Thailand
Phone: +66 2 254 9183