Privacy Policy

1. Introduction

Siam Nexus ("we", "us", "our") is a strategic consulting practice based at 142 Sukhumvit Soi 21, Asoke, Watthana, Bangkok 10110, Thailand. We are committed to handling personal data responsibly and transparently, in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and other applicable standards.

This policy explains how we collect, use, store, and protect personal information provided to us through our website at siamnexu.info or in the course of our consulting engagements. Please read it carefully. If you have questions, contact us at [email protected].

2. Data We Collect

We collect personal data in the following situations:

• When you submit an enquiry through the contact form on our website (name, email address, phone number, message content)
• When you correspond with us by email or telephone (contact details, content of communications)
• When you enter into a consulting engagement with us (identity documents, business information, financial information where relevant)
• Automatically, through cookies and analytics tools when you visit our website (IP address, browser type, pages visited, session duration)

3. How We Use Your Data

We use personal data for the following purposes, with the corresponding legal basis under PDPA:

• To respond to enquiries — Legitimate interest in maintaining communication with prospective clients
• To deliver consulting services — Performance of a contract to which you are a party
• To prepare and maintain engagement documentation — Legitimate interest and contractual necessity
• To send relevant updates where you have consented — Consent
• To comply with legal and regulatory obligations — Legal obligation
• To improve our website through analytics — Legitimate interest, subject to cookie consent

4. Data Retention

We retain personal data for the following periods:

• Enquiry records (no engagement resulting): up to 12 months from last contact
• Engagement records: 7 years from engagement completion, in accordance with Thai legal and accounting requirements
• Website analytics data: up to 26 months, in anonymised form where possible
• Email correspondence: up to 3 years from the date of last exchange

5. Data Sharing

We do not sell, rent, or trade personal data. We may share data in limited circumstances:

• Service providers: Third-party tools used to operate our website and communications (e.g., hosting providers, email services), each bound by data processing agreements
• Analytics providers: Google Analytics, used to understand website usage — subject to your cookie consent
• Legal requirement: Where disclosure is required by Thai law, court order, or regulatory authority

Client identities and engagement contents are never shared with third parties for commercial or marketing purposes.

6. Data Protection

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Encrypted storage and transmission of data (TLS/SSL)
• Access controls limiting data access to those with a direct need
• Regular review of data handling practices
• Confidentiality obligations for all staff and associates handling client data

In the event of a data breach that could harm your rights, we will notify you and the relevant authorities in accordance with PDPA requirements.

7. Cookies

Our website uses cookies to function correctly and to understand how it is used. For full details, please see our Cookie Policy. You may manage your cookie preferences at any time through that page or your browser settings.

8. Your Rights Under PDPA

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

• Right of access: To request a copy of personal data we hold about you
• Right to rectification: To request correction of inaccurate or incomplete data
• Right to erasure: To request deletion of data where there is no lawful basis for continued processing
• Right to portability: To receive your data in a structured, commonly used format where technically feasible
• Right to object: To object to processing based on legitimate interest
• Right to withdraw consent: To withdraw consent at any time where processing is consent-based, without affecting prior processing
• Right to lodge a complaint: With Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have been violated

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

10. Children's Privacy

Our services are directed at professionals and business organisations. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that such data has been collected, we will delete it promptly.

11. Policy Updates

We may update this policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted at this address with a revised date. Continued use of the site after an update constitutes acceptance of the revised policy.

12. Contact

For privacy-related enquiries or to exercise your rights, contact:

• Email: [email protected]
• Address: Siam Nexus, 142 Sukhumvit Soi 21, Asoke, Watthana, Bangkok 10110, Thailand