Privacy Policy

1. Introduction

terceras is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our consulting services.

This policy applies to all personal data processed by terceras in connection with our business operations in Bangkok, Thailand. We comply with Thailand's Personal Data Protection Act (PDPA) and maintain high standards for data protection.

2. Data Controller Information

The data controller for your personal information is:

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Information You Provide Directly

• Name and contact details (email address, phone number)
• Company or organization name and position
• Inquiry or consultation details submitted through contact forms
• Communication preferences
• Information provided during consulting engagements

3.2 Information Collected Automatically

• Device and browser information (IP address, browser type, operating system)
• Website usage data (pages visited, time spent, referring website)
• Cookies and similar tracking technologies (see our Cookie Policy)

4. How We Use Your Personal Data

We process your personal data for the following purposes:

4.1 Service Delivery

• Responding to your inquiries and consultation requests
• Delivering consulting services and advisory engagements
• Communicating about projects, deliverables, and milestones
• Processing payments and maintaining records

4.2 Business Operations

• Improving our website and services
• Analyzing usage patterns and trends
• Internal record keeping and compliance
• Protecting against fraud and security threats

4.3 Marketing and Communications

• Sending relevant updates about our services (with your consent)
• Providing information you have requested
• Professional networking and relationship building

5. Legal Basis for Processing

Under Thailand's PDPA, we process your personal data based on one or more of the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for performing a contract with you or taking steps at your request before entering into a contract
• Legal Obligation: Processing is necessary for compliance with Thai law
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

6.1 Service Providers

We engage third-party companies to perform services on our behalf, such as website hosting, email delivery, and analytics. These providers have access to personal data only as needed to perform their functions and are obligated to maintain confidentiality.

6.2 Legal Requirements

We may disclose your personal data if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Secure storage systems with access controls
• Regular security assessments and updates
• Employee training on data protection practices
• Confidentiality agreements with staff and contractors

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods vary depending on the type of data and the purpose:

• Inquiry data: Retained for up to 2 years from last contact
• Client engagement data: Retained for up to 7 years after engagement completion for business and legal compliance purposes
• Marketing consent: Retained until consent is withdrawn
• Website analytics: Typically aggregated and retained for up to 26 months

9. Your Rights

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete personal data
• Right to Erasure: You can request deletion of your personal data under certain circumstances
• Right to Restriction: You can request that we limit processing of your personal data
• Right to Data Portability: You can request transfer of your data to another organization
• Right to Object: You can object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website usage. For detailed information about the cookies we use and your choices regarding cookies, please see our Cookie Policy.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us, and we will take steps to delete such information.

13. International Data Transfers

Your personal data is primarily stored and processed in Thailand. If we transfer data outside Thailand, we ensure appropriate safeguards are in place to protect your data in accordance with PDPA requirements.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our services after any modifications indicates your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: