Privacy Policy
Last Updated: February 15, 2026
Introduction
singhaoes ("we," "us," or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, engage our services, or otherwise interact with us.
This policy applies to all personal data collected by singhaoes and is designed to comply with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and international data protection standards. By using our services or providing us with your personal data, you acknowledge that you have read and understood this Privacy Policy.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].
Information We Collect
Personal Data Provided by You
We collect personal data that you voluntarily provide when you:
- Complete contact forms or request information about our services
- Engage us for workflow audits, training programs, or governance consulting
- Subscribe to newsletters or communication updates
- Participate in surveys or provide feedback
- Correspond with us via email, phone, or other channels
This may include: name, email address, phone number, job title, company name, business address, and any information you choose to provide in messages or forms.
Data Collected Automatically
When you visit our website, we automatically collect certain information about your device and browsing activity, including:
- IP address and general geographic location
- Browser type and version
- Operating system and device information
- Pages visited, time spent, and navigation patterns
- Referring website or source
This data is collected through cookies and similar technologies. For details on cookies, please see our Cookie Policy.
Legal Basis for Processing
We process personal data based on the following legal grounds:
- Consent: You have given explicit consent for specific processing purposes
- Contract: Processing is necessary to fulfill services you have engaged us for
- Legitimate Interest: Processing serves our legitimate business interests while respecting your rights
- Legal Obligation: Processing is required to comply with applicable laws and regulations
How We Use Your Information
We use collected personal data for the following purposes:
Service Delivery
- Conducting workflow audits and analyzing your business processes
- Delivering department-specific training programs
- Developing governance frameworks and policy templates
- Providing consultation and implementation support
- Responding to inquiries and service requests
Communication and Marketing
- Sending service updates and engagement follow-ups
- Providing information about new services or offerings (with your consent)
- Distributing newsletters or educational content (opt-in only)
- Conducting satisfaction surveys and gathering feedback
Website Improvement and Analytics
- Analyzing website usage to improve functionality and user experience
- Understanding visitor behavior and preferences
- Troubleshooting technical issues
- Ensuring website security and preventing fraud
Legal Compliance and Protection
- Complying with legal obligations under Thai law
- Protecting our legal rights and interests
- Preventing and detecting fraud or security issues
- Resolving disputes and enforcing agreements
Data Sharing and Third Parties
We do not sell or rent your personal data to third parties. We may share your information only in the following circumstances:
Service Providers
We may engage trusted third-party service providers to support our operations, such as:
- Website hosting and technical infrastructure providers
- Email service providers for communications
- Analytics platforms to understand website usage
- Professional consultants (legal, accounting) as needed
These service providers are bound by confidentiality agreements and may only use your data to perform services on our behalf. They are not permitted to use your data for their own purposes.
Legal Requirements
We may disclose personal data when required by law or in response to valid legal requests from authorities, including to:
- Comply with legal processes or government requests
- Protect the rights, property, or safety of singhaoes, our clients, or others
- Investigate potential violations of our terms or policies
- Respond to claims or legal proceedings
Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, personal data may be transferred as part of the transaction. We will notify you of any such change and the choices you may have regarding your data.
Data Protection and Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:
- Encryption of data in transit using SSL/TLS protocols
- Secure storage with access controls and authentication
- Regular security assessments and updates
- Employee training on data protection and confidentiality
- Incident response procedures for data breaches
- Limited access to personal data based on job responsibilities
While we strive to protect your personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security but commit to addressing any vulnerabilities promptly.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Retention periods vary based on data type and purpose:
- Client engagement data: Retained for duration of service engagement plus 7 years for legal and tax compliance
- Marketing communications: Until consent is withdrawn or contact becomes inactive
- Website analytics: Typically 24-36 months
- Inquiry data: 12 months for unengaged prospects
When data is no longer needed, we securely delete or anonymize it to prevent identification.
Your Rights Under PDPA
Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:
Right to Access
You may request access to the personal data we hold about you and obtain a copy of such data.
Right to Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data in certain circumstances, such as when data is no longer necessary or you withdraw consent.
Right to Data Portability
You may request to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to Object
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Restrict Processing
You may request restriction of processing in certain situations, such as when contesting data accuracy or objecting to processing.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Personal Data Protection Committee of Thailand if you believe your rights have been violated.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days as required by PDPA. We may request additional information to verify your identity before processing certain requests.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance user experience and analyze website traffic. Cookies are small text files placed on your device that allow us to recognize your browser and capture certain information.
We use the following types of cookies:
- Essential Cookies: Necessary for website functionality and cannot be disabled
- Analytics Cookies: Help us understand how visitors interact with our website
- Marketing Cookies: Track visitor activity to deliver relevant advertising (with consent)
- Preference Cookies: Remember your settings and choices for better experience
For detailed information about cookies we use and your choices, please review our Cookie Policy. You can manage cookie preferences through our cookie consent tool or your browser settings.
Third-Party Websites
Our website may contain links to third-party websites, services, or resources. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
This Privacy Policy applies only to information collected by singhaoes through our website and services.
Children's Privacy
Our services are intended for businesses and professional use. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have collected data from someone under 18 without parental consent, we will take steps to delete such information promptly.
If you believe we have collected data from a minor, please contact us at [email protected].
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending email notifications to clients and subscribers for material changes
- Displaying a notice on our website for a reasonable period
We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.
Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
singhaoes - Data Protection Officer
Email: [email protected]
Phone: +66 44 283 671
Address: 45 Mittraphap Road, Nai Mueang, Mueang Nakhon Ratchasima, Nakhon Ratchasima 30000, Thailand
We will respond to your inquiries within 30 days as required by Thailand's Personal Data Protection Act.
Governing Law and Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of the Kingdom of Thailand. Any disputes arising from this policy or our data practices shall be subject to the exclusive jurisdiction of the courts of Thailand.
This policy complies with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and incorporates principles from international data protection frameworks where applicable to our operations.