Legal Document

Privacy Policy

Mongkut Advisory  |  Last Updated: 10 April 2025  |  Effective Date: 10 April 2025

1. Introduction

Mongkut Advisory ("we", "us", "our") is committed to protecting the personal data of individuals who engage with our website and services. This Privacy Policy explains what personal data we collect, how we use it, and the rights available to individuals under Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA).

This Policy applies to personal data collected through our website at mongkutor.site, through enquiry forms, and in the course of delivering our advisory services to clients. It does not apply to the internal data handling practices of client companies, which are covered by separate engagement terms.

For questions about this Policy or our data practices, contact us at [email protected].

2. Data We Collect

2.1 Data you provide directly

When you submit an enquiry through our contact form, we collect your name, email address, telephone number (if provided), and the contents of your message. If you engage us for an advisory service, we may collect additional information necessary to carry out the engagement, as described in the applicable engagement letter.

2.2 Data collected automatically

When you visit our website, we may collect standard technical data including your IP address, browser type, referring URL, and pages visited. This data is collected through website analytics tools and session cookies. See Section 5 and our Cookie Policy for details.

2.3 Legal basis for processing

• Consent — for analytics cookies and marketing communications, where you have given consent
• Legitimate interest — for website security, fraud prevention, and improving our services
• Performance of a contract — for processing data necessary to deliver engagement services you have requested
• Legal obligation — where we are required to retain or process data under applicable Thai law

2.4 Data retention

Enquiry data is retained for 12 months from the date of submission. Client engagement data is retained for 7 years from the completion of an engagement in accordance with Thai legal and professional record-keeping requirements. Analytics data is retained for a maximum of 26 months.

3. How We Use Your Data

• To respond to your enquiry and determine whether an engagement is appropriate
• To deliver advisory services under an agreed engagement letter
• To send service-related communications, including engagement updates and deliverables
• To improve the functionality and content of our website through analytics
• To comply with applicable Thai legal and regulatory obligations

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling. We do not send unsolicited marketing communications; any communications beyond initial enquiry follow-up require your explicit consent.

3.1 Third-party service providers

We use a small number of third-party services to support website operation and analytics. These providers process data on our behalf under data processing agreements and are not permitted to use your data for their own purposes. Service categories include: website hosting, analytics, and email infrastructure. We do not share personal data with advertising networks.

4. Data Protection Measures

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• HTTPS encryption for all website traffic
• Access controls limiting data access to staff with a need to process it
• Regular review of data handling practices
• Secure disposal of data no longer required for its original purpose

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the Office of the Personal Data Protection Committee (PDPC) as required under the PDPA, and affected individuals where required.

5. Cookies

Our website uses cookies to support basic functionality and to collect anonymised analytics data. Essential cookies cannot be disabled as they are necessary for the website to operate. Analytics and preference cookies are only placed with your consent.

For a full description of the cookies we use and how to manage them, please see our Cookie Policy.

6. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights in respect of personal data we hold about you:

• Right of access — to request a copy of personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of personal data in certain circumstances
• Right to restriction — to request that we limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format where processing is based on consent or contract
• Right to object — to object to processing based on legitimate interest
• Right to withdraw consent — to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand.

7. Third-Party Links

Our website may contain links to external websites not operated by Mongkut Advisory. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal data.

8. Children's Privacy

Our services are directed at businesses and professional individuals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a minor, we will delete it promptly.

9. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. Material changes will be noted at the top of this page with a revised effective date. Continued use of our website following an update constitutes acceptance of the revised Policy.

10. Contact

Data Controller: Mongkut Advisory
246 Phra Ram 4 Road, Khlong Toei, Khlong Toei, Bangkok 10110, Thailand
Email: [email protected]
Telephone: +66 2 219 4671