Privacy Policy

1. Introduction

Bequestra ("we", "us", "our") is a document organisation and family archive service based at 198 Surawong Road, Bang Rak, Bangkok 10500, Thailand. We are committed to handling personal data responsibly and in compliance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (PDPA).

This policy explains what personal data we collect through this website and in the course of providing our services, how we use it, how we protect it and what rights you have. If you have questions, please contact us at [email protected].

2. Personal Data We Collect

We collect personal data only to the extent necessary to respond to enquiries and deliver services. The categories we may collect include:

• Contact information: name, email address, telephone number, physical address if provided through our contact form or in the course of a service engagement.
• Communication records: messages sent to us by email or through the website contact form.
• Website usage data: anonymised or aggregated data collected through cookies and analytics tools (see Section 5).

Legal basis: We process personal data on the basis of consent (where you submit a contact form or agree to cookies), contractual necessity (where we are delivering a service you have engaged us for) and our legitimate interest in responding to enquiries and improving our website.

Retention: Contact enquiry data is retained for up to 24 months from the date of last contact. Data relating to active service engagements is retained for the duration of the project and up to 12 months after completion. Website analytics data is retained for up to 26 months.

3. How We Use Personal Data

• To respond to enquiries and provide information about our services
• To deliver services you have engaged us to carry out
• To send service-related communications (project updates, scheduling)
• To comply with legal obligations applicable in Thailand
• To analyse and improve this website using anonymised data

We do not use your personal data for unsolicited marketing. We do not sell personal data to third parties under any circumstances.

Third-party sharing: We may share data with service providers who support our operations (e.g. secure cloud storage providers) where they are bound by data processing agreements. We do not share data with any other third parties without your explicit consent.

4. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or disclosure. These include:

• Encrypted storage for digital files during project work
• Access controls limiting data to staff involved in the relevant project
• Secure deletion of digital copies after project delivery
• HTTPS encryption for this website

In the event of a personal data breach that poses a risk to your rights, we will notify the relevant supervisory authority and, where required, affected individuals in accordance with PDPA obligations.

5. Cookies

This website uses cookies to function properly and, with your consent, to collect anonymised usage data. Essential cookies are required for the site to operate. Optional analytics and preference cookies are only set if you give consent through the cookie banner.

For full details, including how to manage your preferences, please see our Cookie Policy.

6. Your Rights Under Thai PDPA

Under Thailand's Personal Data Protection Act, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate data.
• Right to erasure: to request deletion of your data where we no longer have a legitimate basis for holding it.
• Right to data portability: to receive your data in a commonly used format where technically feasible.
• Right to object: to object to processing based on legitimate interest.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have been infringed.

7. Third-Party Links

This website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this privacy policy from time to time. Where changes are material, we will note the updated date at the top of this page. Continued use of this website following any update constitutes acceptance of the revised policy.