Privacy Policy

1. Who We Are (Data Controller)

Malee Core Co., Ltd. is the data controller responsible for your personal data collected through this website and our consulting engagements. We operate from 38 Pattanakarn Road, Soi 20, Suan Luang, Bangkok 10250, Thailand. For data-related inquiries, contact us at [email protected].

2. Personal Data We Collect

We collect personal data through contact forms, direct communications, and cookies. The categories of data we collect include:

• Identity data: Name, job title, organization name
• Contact data: Email address, phone number, mailing address (if provided)
• Communications data: Content of messages you send us through contact forms or email
• Technical data: IP address, browser type, pages visited, session duration (via analytics cookies, where consented)
• Usage data: How you navigate and interact with our website

We do not collect sensitive personal data (health information, biometric data, etc.) through our website. Any sensitive data shared in the course of a consulting engagement is governed by a separate data processing agreement.

3. How and Why We Use Your Data

We use your personal data for the following purposes, each with a corresponding legal basis under Thailand's Personal Data Protection Act (PDPA B.E. 2562):

• Responding to enquiries: Legitimate interest — to communicate with prospective and current clients who have contacted us
• Service delivery: Contract performance — to deliver consulting services you have engaged us to provide
• Marketing communications: Consent — to send updates, case studies, or relevant information (only if you have opted in)
• Website analytics: Consent — to understand how our website is used and improve it (only with analytics cookie consent)
• Legal obligations: Legal compliance — to meet our obligations under Thai law, including tax and financial record-keeping

4. Data Retention

We retain personal data only as long as necessary for the purposes outlined above:

• Contact enquiries: up to 24 months from last contact
• Client engagement records: 7 years from project close, in compliance with Thai accounting law
• Marketing consent records: retained until consent is withdrawn
• Website analytics data: up to 26 months (aggregated, anonymized where possible)

5. Third-Party Data Sharing

We do not sell your personal data. We may share it with:

• Service providers: Cloud hosting, email platforms, and CRM tools operating under data processing agreements with us
• Analytics providers: Google Analytics (anonymized usage data, where analytics cookies are accepted)
• Legal authorities: Only when required by law or court order

Any third-party service providers are required to handle your data in accordance with this policy and applicable law.

6. Data Protection Measures

We take reasonable technical and organizational measures to protect your data, including:

• HTTPS encryption for all data transmitted to and from this website
• Access controls limiting data access to personnel who require it for their role
• Regular review of third-party service provider security practices
• Staff awareness of data handling obligations under PDPA

In the event of a personal data breach that poses a risk to your rights, we will notify the Office of the Personal Data Protection Committee (PDPC) within 72 hours and notify affected individuals where required.

7. Cookie Information

Our website uses cookies to improve functionality and, with your consent, to collect analytics data. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Your Rights Under PDPA

As a data subject under Thailand's PDPA, you have the following rights:

• Right to access: Request confirmation that we hold your data and obtain a copy
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your data where there is no lawful basis for continued processing
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interest, including direct marketing
• Right to withdraw consent: Withdraw any previously given consent at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint: File a complaint with the Office of the Personal Data Protection Committee (PDPC) at pdpc.or.th

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receipt.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies before providing any personal data.

10. Children's Privacy

Our services are directed at professionals and organizations and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.

11. International Data Transfers

Your data is primarily processed and stored in Thailand. Where third-party service providers process data outside Thailand, we ensure appropriate safeguards are in place in compliance with PDPA cross-border transfer requirements.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the revised policy.

13. Contact Us

For any data privacy questions or requests:

• Email: [email protected]
• Address: 38 Pattanakarn Road, Soi 20, Suan Luang, Bangkok 10250, Thailand