Privacy Policy

1. Data Controller

The data controller for all personal data collected through this website and through our services is:

2. Personal Data We Collect

We collect personal data in the following ways:

2.1 Through Our Contact Form

• Full name (required)
• Email address (required)
• Phone number (optional)
• Message content (optional)

2.2 Through Service Delivery

When you use our services, we may handle personal data contained within documents you bring to sessions (for example, during the Paperwork Organisation service). We treat all such data as confidential, handle it only to the extent necessary to deliver the service and do not retain any copies beyond the session.

2.3 Through Website Cookies

We use essential cookies for basic site functionality and, with your consent, optional analytics cookies to understand how the site is used. See our Cookie Policy for details.

2.4 Legal Basis for Processing

• Consent: For optional analytics and marketing cookies, and for direct marketing communications.
• Contract performance: For data needed to deliver a service you have booked and paid for.
• Legitimate interests: For responding to enquiries submitted through our contact form, where you have voluntarily reached out to us.

3. How We Use Your Data

We use personal data only for the purposes it was collected:

• Responding to enquiries submitted through our contact form
• Booking confirmations and pre-session communications
• Delivering the services you have requested
• Sending post-session follow-up notes
• Invoicing and receipt generation
• Improving our website and services through anonymised analytics data (only with your consent)

We do not send marketing communications unless you have specifically opted in. You may withdraw consent at any time by contacting us at [email protected].

4. Data Sharing

We do not sell, rent or trade personal data. We may share data with the following categories of third parties in limited circumstances:

• Service providers: Web hosting and email providers who process data on our behalf under data processing agreements.
• Analytics providers: Anonymised usage data may be processed by analytics tools (only where you have consented to analytics cookies).
• Legal requirement: If required by Thai law or regulatory authority, we will disclose data as necessary.

5. Data Retention

• Contact form submissions: Retained for up to 12 months from the date of submission, then securely deleted.
• Service booking records: Retained for 3 years for accounting purposes, then securely deleted.
• Documents handled during service delivery: Not retained. All original documents are returned and any digital working copies are deleted on the same day the service is completed.
• Cookie consent records: Stored in your browser's local storage for 12 months.

6. Data Protection Measures

We take reasonable and practical steps to protect the personal data we hold:

• Data submitted through our contact form is transmitted over an encrypted HTTPS connection.
• Access to client records is restricted to Pillarwise staff directly involved in delivering the relevant service.
• Physical documents handled during the Paperwork Organisation service are kept secure throughout the session and returned or disposed of securely on completion.
• In the event of a data breach affecting personal data, we will notify affected individuals and the relevant Thai supervisory authority within 72 hours where required by the PDPA.

7. Cookies

This website uses essential cookies for basic functionality and optional analytics cookies to understand site usage. You can manage your cookie preferences through the consent banner shown on your first visit, or by visiting our Cookie Policy page at any time.

8. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act B.E. 2562, you have the following rights in relation to your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data where we no longer have a legitimate reason to hold it.
• Right to restrict processing: Ask us to limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw any consent you have given at any time.
• Right to complain: Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately before submitting any personal data.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we hold data relating to a minor, please contact us and we will take steps to remove it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised version will be published on this page with an updated date. Where changes are material, we will notify active clients by email. Continued use of our website after changes are published constitutes acceptance of the updated policy.