Privacy Policy

1. Introduction

Singha Stack ("we", "us", "our") is committed to handling personal data responsibly. This policy describes what personal information we collect, how we use it, how we protect it, and what rights you have regarding your data.

This policy applies to all individuals who visit our website, enquire about our services, or engage with us professionally. Singha Stack is based at 47 Sukhumvit Road, Bang Lamung, Chonburi 20150, Thailand, and operates in compliance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable data protection standards.

2. Data We Collect

We collect personal data in the following circumstances:

• Contact form submissions: Name, email address, phone number (optional), and any information you choose to include in your message.
• Email correspondence: Content of messages exchanged with us and any personal information contained within them.
• Service engagements: Business name, contact details, and information relevant to the scope of work, collected during Foundations Reviews, Guardian Integration projects, and Standing Watch Plan engagements.
• Website usage data: Technical data collected automatically via cookies and analytics tools, including IP addresses, browser type, pages visited, and session duration.

We do not collect sensitive personal data (as defined under the PDPA) unless it is directly and necessarily relevant to an engagement, in which case we will seek explicit consent.

3. Legal Basis and How We Use Your Data

We process personal data on the following legal bases:

• Consent: For marketing communications and optional analytics cookies.
• Contract: To deliver services you have engaged us to provide.
• Legitimate interest: For internal record-keeping, service improvement, and responding to enquiries.
• Legal obligation: Where required by Thai law or applicable regulations.

Your data is used for:

• Responding to enquiries and service requests
• Delivering and managing our services
• Maintaining records of engagements and decisions
• Improving our website and understanding how visitors use it
• Complying with legal and regulatory requirements

4. Data Retention

We retain personal data for as long as is reasonably necessary for the purposes for which it was collected:

• Enquiry data: Up to 12 months from last contact, unless an engagement follows.
• Engagement records: Up to 5 years from the end of the engagement for professional and legal purposes.
• Analytics data: Up to 26 months, subject to cookie preferences.

5. Data Sharing

We do not sell personal data. We may share data with:

• Service providers: Third-party tools used to operate our website or manage communications (e.g. analytics platforms). These providers process data on our behalf under appropriate data processing agreements.
• Legal authorities: Where required by law, regulation, or court order in Thailand.

6. Data Protection Measures

We take the following steps to protect personal data:

• Encrypted transmission via HTTPS for all website interactions
• Access to client records restricted to team members directly involved in the relevant engagement
• Written records of data access decisions provided to clients for all service engagements
• Regular review of data handling practices

In the event of a data breach that may affect your rights, we will notify affected individuals and the relevant Thai authority as required by the PDPA.

7. Cookies

We use cookies to understand how visitors use our website. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies before providing any personal information.

9. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to legal retention requirements
• Withdraw consent at any time (where processing is based on consent)
• Object to processing based on legitimate interest
• Request data portability in a readable format
• Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at privacy@{{DOMAIN}}. We will respond within 30 days.

10. Children's Privacy

Our services are directed at businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently received data from a minor, please contact us at privacy@{{DOMAIN}}.

11. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via our website. Continued use of our services following any update constitutes acceptance of the revised policy.

12. Contact

For data-related enquiries, contact us at:

• Email: privacy@{{DOMAIN}}
• Post: Singha Stack, 47 Sukhumvit Road, Bang Lamung, Chonburi 20150, Thailand