Privacy Policy

chadavorner Company Limited ("chadavorner", "we", "us", or "our") is committed to handling personal information responsibly and transparently. This Privacy Policy describes how we collect, use, store, and protect personal data in the course of operating our business advisory services. It applies to all individuals who interact with us through our website, by email, or in the context of a consulting engagement.

For questions about this policy or to exercise your rights, contact us at [email protected].

1. Information We Collect

1.1 Information You Provide Directly

When you contact us through our website form, by email, or in the course of an engagement, we may collect your name, email address, phone number, job title, organization name, and any other information you choose to share in your message.

1.2 Information Collected Automatically

When you visit our website, we may collect technical information including your IP address, browser type, device type, pages visited, and visit duration through analytics cookies. This data is used in aggregate form to understand how the site is used.

1.3 Legal Basis for Processing

We process personal data on the following bases: your consent (for marketing communications and optional cookies); the performance of a contract or pre-contractual steps (for client engagements); our legitimate interests (for website analytics and security); and legal compliance where required.

2. How We Use Your Information

• To respond to enquiries and conduct exploratory conversations about potential engagements
• To deliver advisory services and manage ongoing client engagements
• To communicate updates relevant to your engagement or services
• To maintain records for legal, accounting, and compliance purposes
• To improve our website and understand visitor behavior through analytics
• To send relevant communications where you have provided consent

2.1 Data Retention

Client engagement records are retained for seven years following the close of an engagement, in line with Thai commercial documentation requirements. Website enquiry data is retained for 24 months. Analytics data is aggregated and does not identify individuals.

3. How We Protect Your Information

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure. These measures include encrypted data transmission, access controls limiting who within our team can view client information, and regular review of our security practices.

In the event of a personal data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority in accordance with applicable law.

4. Cookies

Our website uses cookies to function correctly and to help us understand how visitors use the site. Essential cookies are necessary for basic functionality. Analytics cookies help us understand visitor behavior in aggregate form. Marketing and preference cookies are optional and require your consent.

For full details, see our Cookie Policy.

5. Your Rights

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and other applicable law, you have the following rights in relation to your personal data:

• Right to access — to request a copy of personal data we hold about you
• Right to rectification — to have inaccurate data corrected
• Right to erasure — to request deletion of personal data in certain circumstances
• Right to object — to object to processing for direct marketing or legitimate interest purposes
• Right to withdraw consent — at any time, where processing is based on consent
• Right to data portability — to receive data in a structured, machine-readable format

To exercise any of these rights, contact [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee.

6. Third-Party Services and Links

Our website may use third-party analytics services. We do not sell personal data to third parties. Our website may contain links to external sites; we are not responsible for the privacy practices of those sites.

If we engage third-party processors (e.g., email hosting), we ensure they are bound by appropriate data processing agreements and provide adequate protection for personal data.

7. Children's Privacy

Our services are directed exclusively at businesses and individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have done so, we will delete that information promptly.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via our website. The "Last Updated" date at the top of this page reflects when the most recent revision was made. Continued use of our website or services following an update constitutes acceptance of the revised policy.