Privacy Policy

1. Who We Are

Vestglade is an educational and information services provider based in Bangkok, Thailand. Our registered address is 64 Ratchadaphisek Road, Din Daeng, Bangkok 10400. For all privacy-related enquiries: [email protected]

2. What Data We Collect

When you use this website or contact us, we may collect the following:

• Contact data: name, email address, and phone number submitted via the contact form.
• Communication records: email or telephone correspondence related to enquiries or service delivery.
• Service engagement data: notes relating to service scope agreed for records review or workshop sessions, held only for the duration of the engagement.
• Technical data: IP address, browser type, pages visited, and time on site — collected automatically via analytics tools if you have accepted analytics cookies.

We do not collect sensitive personal data (financial account details, identification document numbers, health information) through this website. Any personal documents handled during in-person Records Review sessions remain physically in the client's possession throughout.

3. Legal Basis for Processing

• Consent: for optional analytics and marketing cookies, and for sending informational updates where you have opted in.
• Contractual necessity: for processing enquiry data when you request a service.
• Legitimate interest: for maintaining records of completed engagements for a reasonable period.
• Legal obligation: to the extent required by Thai law.

4. How We Use Your Data

• To respond to enquiries and arrange service delivery.
• To deliver the agreed scope of any booked service.
• To send relevant information about our services where you have consented.
• To improve this website based on aggregated, anonymised analytics data.
• To meet legal obligations if required by Thai authorities.

We do not sell, rent, or trade personal data with any third party for commercial purposes.

5. Data Sharing

We may share data with:

• Service providers: hosting, email, and analytics platforms operating under data processing agreements.
• Thai authorities: if required by law or valid legal process.

We do not share data with financial institutions, insurance companies, or any organisation that sells financial products.

6. Data Retention

• Contact form submissions: retained for up to 12 months unless a service engagement follows.
• Service engagement records: retained for up to 3 years from the date of service completion for internal reference purposes, then securely deleted.
• Analytics data: retained in aggregated form only; individual session data is not retained beyond 14 months.

7. Data Security

We take reasonable technical and organisational steps to protect your data, including:

• HTTPS encryption for all website communications.
• Access controls limiting who within Vestglade can view personal data.
• Secure deletion procedures when data is no longer required.

In the event of a data breach that is likely to affect your rights, we will notify you and the relevant Thai supervisory authority within 72 hours of becoming aware, as required under the PDPA.

8. Cookies

This website uses cookies to function and, with your consent, to understand how visitors use it. For a full explanation of the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Your Rights Under the PDPA

As a data subject under Thai law, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: request deletion of your data where there is no overriding legal basis to retain it.
• Restriction: ask us to limit processing in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: at any time for consent-based processing, without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have not been respected.

10. Third-Party Links

This website may contain links to official government websites and other external resources. We are not responsible for the privacy practices of those sites and recommend reading their own privacy notices.

11. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data through this site, please contact us at [email protected] and we will remove it promptly.

12. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of this website after an update constitutes acceptance of the revised policy.

13. Contact

For any privacy-related questions or requests:

• Email: [email protected]
• Post: Vestglade, 64 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand
• Phone: +66 2 248 7935