Privacy Policy

1. Introduction

Lanna Circuit Company Limited ("Lanna Circuit", "we", "us", "our") is committed to protecting the personal data of individuals who engage with our services, visit our website, or interact with us in the course of business. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA) and other applicable laws.

If you have questions about this policy or our data practices, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: name, email address, phone number, and any message content you provide
• Engagement correspondence: emails, telephone records, and documents exchanged during program delivery
• Website usage data: browser type, pages visited, session duration, and device information (via analytics cookies, where consent is given)
• Business information: company name, role, and operational details shared during consulting engagements (covered by separate confidentiality agreement)

Data retention: Contact form data is retained for up to 24 months from the date of submission. Engagement records are retained for up to 5 years in accordance with standard business record requirements under Thai commercial law.

3. How We Use Personal Data

We use the personal data we collect for the following purposes:

• Responding to enquiries and providing information about our programs
• Delivering consulting and training services under agreed engagement terms
• Conducting post-engagement review communications
• Improving our website and service content based on aggregate usage data
• Meeting legal obligations and maintaining business records

We do not use personal data for automated decision-making or profiling. We do not sell, rent, or share personal data with third parties for marketing purposes.

4. Legal Basis for Processing

Under the PDPA, we process personal data on the following legal bases:

• Consent: for analytics cookies and non-essential communications, where you have opted in
• Contract performance: for data processed in connection with service delivery
• Legitimate interest: for responding to enquiries and maintaining business records
• Legal obligation: for compliance with Thai commercial and tax laws

5. Data Protection Measures

We maintain appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss, including:

• Encrypted data transmission via HTTPS
• Access controls limiting data access to personnel with a need to know
• Confidentiality agreements with all staff and contractors who handle client data
• Regular review of data handling practices
• Prompt notification of any data breach in accordance with PDPA requirements

6. Cookies

Our website uses cookies to support its operation and, where consent is given, to understand how visitors use the site. For full details on the types of cookies we use and how to manage your preferences, please see our Cookie Policy.

7. Your Rights Under the PDPA

As a data subject under Thailand's Personal Data Protection Act, you have the following rights:

• Right to access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate personal data
• Right to erasure: request deletion of personal data where there is no legitimate reason to retain it
• Right to data portability: request your personal data in a structured, commonly used format
• Right to object: object to processing based on legitimate interest
• Right to withdraw consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Committee of Thailand.

8. Third-Party Services

Our website may use the following third-party services, which have their own privacy policies:

• Google Analytics (analytics, where consent is given)
• Google Maps (embedded map on our contact page)
• Font delivery via Google Fonts CDN

We are not responsible for the privacy practices of external websites linked from our site.

9. Children's Privacy

Our services are directed at business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have collected data from a minor, please contact us at [email protected] and we will take appropriate action.

10. Policy Updates

We may update this Privacy Policy periodically. The date at the top of this page will reflect when the most recent changes were made. Continued use of our website after any changes constitutes acceptance of the revised policy. For significant changes, we will notify active clients by email.

11. Contact Information

Data Controller: Lanna Circuit Company Limited