Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Doi Vertex Co., Ltd.
29 Ploenchit Road, Lumpini, Bangkok 10330, Thailand
Email: [email protected]
Phone: +66 2 326 8174

2. Personal Data We Collect

We collect personal data in the following circumstances:

2.1 Contact form submissions

• Full name
• Email address
• Phone number (if provided)
• Organisation name (if provided)
• The content of your message

2.2 Website usage data

• IP address (anonymised where technically feasible)
• Browser type and version
• Pages visited and time spent (via analytics cookies, subject to your consent)
• Referring URL

2.3 Engagement and service delivery

When an engagement begins, we may collect additional professional information such as organisational structure details, financial planning data, and leadership profile information. This data is collected directly from you or your organisation and is used solely for the purpose of the agreed engagement.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the PDPA:

• Consent — for analytics and marketing cookies, and for receiving promotional communications from us.
• Contractual necessity — to fulfil our obligations under a consulting engagement agreement.
• Legitimate interests — to respond to enquiries you initiate, to operate our website securely, and to improve our services.
• Legal obligation — where Thai law requires us to retain or disclose data.

4. How We Use Your Data

We use collected personal data to:

• Respond to your enquiries and schedule consultations
• Deliver the consulting services you have contracted with us
• Send engagement-related documents and updates
• Improve website functionality and content (with consent)
• Comply with applicable Thai legal and regulatory requirements

We do not use your personal data for unsolicited marketing communications without your explicit prior consent.

5. Sharing of Personal Data

We do not sell, rent, or trade personal data to third parties. Limited sharing may occur in the following situations:

• Service providers — trusted third-party tools we use to operate our website and communications (e.g., email delivery, analytics). These parties process data only on our documented instructions.
• Legal requirements — where disclosure is required by Thai law, court order, or a competent regulatory authority.
• Business transfers — in the event of a merger or acquisition, personal data may be transferred as part of the business assets. Affected individuals will be notified as required by law.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Specific retention periods:

• Contact form data — retained for up to 24 months from the date of submission, or until you request deletion, whichever comes first.
• Engagement data — retained for 7 years following the conclusion of an engagement, in accordance with Thai commercial record-keeping requirements.
• Analytics data — retained for up to 26 months, after which it is aggregated or deleted.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encrypted data transmission (HTTPS), access controls, and periodic review of data handling practices.

No method of transmission over the internet or electronic storage is completely secure. While we work diligently to protect your information, we cannot guarantee absolute security.

8. Your Rights Under the PDPA

As a data subject under Thailand's PDPA, you have the following rights:

• Right to access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data where there is no longer a lawful basis for its retention.
• Right to restrict processing — request that we limit how we use your data in certain circumstances.
• Right to data portability — receive your personal data in a structured, machine-readable format where technically feasible.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Cookies

Our website uses cookies. For full information on the types of cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. This privacy policy applies only to the Doi Vertex website. We are not responsible for the privacy practices of other sites and recommend you review their policies independently.

11. Children's Privacy

Our services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us and we will take appropriate steps to remove it.

12. Changes to This Policy

We may update this privacy policy periodically. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide notice through our website or by email where we hold your contact details. We encourage you to review this page from time to time.

13. Contact & Complaints

For questions, requests, or concerns regarding this policy or our data practices, please contact:

Doi Vertex Co., Ltd.
29 Ploenchit Road, Lumpini, Bangkok 10330
Email: [email protected]
Phone: +66 2 326 8174

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.