Privacy Policy

Ayutthaya Partners Co., Ltd. ("we", "us", or "our") operates a sustainability consulting practice based in Bangkok, Thailand. This privacy policy describes how we handle personal information collected through our website at ayutthayad and in the course of our consulting engagements.

We hold ourselves to a straightforward standard: we collect only what is reasonably necessary, we do not sell personal data, and we aim to be transparent about what we do and why.

1. Information We May Collect

When you interact with this website or contact us directly, we may receive personal information including:

• Your name, email address, phone number, and company name — when submitted through a contact form or sent by email
• The nature of your inquiry or the service area you are asking about
• Technical information about your visit — such as IP address, browser type, referring URL, and pages viewed — collected through cookies and analytics tools (subject to your consent preferences)
• Information you share during the course of an engagement — such as financial, operational, or governance data relevant to a baseline review or reporting project

We do not operate any systems designed to infer sensitive attributes (health, political views, religion, ethnicity, sexual orientation) from browsing behaviour, and we take no steps to identify individual site visitors beyond what is described here.

2. How We Use Personal Information

Information collected through this site or shared with us is used to:

• Respond to enquiries and arrange initial conversations
• Deliver and manage our consulting services
• Send relevant updates — such as reports, meeting notes, or framework developments — to existing clients or contacts who have expressed interest
• Understand how the site is used so that we can improve it (analytics, where consent is given)
• Comply with applicable legal and regulatory obligations in Thailand

We do not use personal information for automated profiling, targeted advertising, or any purpose unrelated to the above.

3. Legal Basis for Processing

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable, other data protection frameworks, we process personal data on the following bases:

• Consent — for analytics cookies and optional communications (you may withdraw at any time)
• Contractual necessity — to carry out work agreed with a client
• Legitimate interests — for basic site operation, fraud prevention, and responding to enquiries in a reasonable way
• Legal obligation — where required by Thai law or regulation

4. Cookies and Analytics

This website may use cookies to support basic site functionality and, where you give consent, to collect analytics data about how pages are used. Our use of cookies is described in full in our Cookie Policy.

We may use tools such as Google Analytics. Where these tools are active, data is transmitted to and processed by third-party providers subject to their own privacy policies. We endeavour to configure these tools in a privacy-respecting manner — for example, by enabling IP anonymisation where available.

5. Sharing of Personal Information

We do not sell, rent, or trade personal information. We may share it in limited circumstances:

• With trusted service providers who assist us in operating this website or delivering services (for example, email hosting or document management), under appropriate data processing agreements
• With professional advisors (legal, accounting) where necessary and subject to confidentiality obligations
• With regulatory or law enforcement authorities, where we are required to do so under Thai law
• In the context of a business transfer — if Ayutthaya Partners were to be acquired or merged — in which case relevant protections would be maintained

6. International Transfers

Some third-party service providers we use may process data outside Thailand. Where this occurs, we take steps to ensure that adequate safeguards are in place — including contractual clauses that align with PDPA requirements — before any transfer takes place.

7. Retention

We retain personal information only for as long as is reasonably necessary for the purposes described here, or as required by law. Contact enquiries that do not lead to an engagement are typically deleted or anonymised within twelve months. Client-related records are retained for a period consistent with professional and statutory obligations, generally not exceeding seven years from the end of the relevant engagement.

8. Your Rights

Under the PDPA and, where applicable, other frameworks, you may have the right to:

• Access a copy of the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information (subject to applicable exceptions)
• Object to or restrict certain uses of your information
• Withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing
• Lodge a complaint with the relevant data protection authority in Thailand

To exercise any of these rights, please contact us using the details below. We will respond within a reasonable timeframe and in accordance with applicable law.

9. Security

We take reasonable organisational and technical measures to protect personal information from unauthorised access, disclosure, or loss. These include access controls, encrypted communications where appropriate, and periodic review of our data handling practices. No method of electronic transmission or storage is completely secure, however, and we cannot give absolute guarantees.

10. Children

Our services are directed at business organisations and professional decision-makers. We do not knowingly collect personal information from individuals under the age of 20. If you believe that a minor has provided us with personal data without appropriate consent, please contact us and we will take steps to remove it.

11. Changes to This Policy

We may update this privacy policy from time to time — for example, in response to regulatory changes or changes in how we operate. Material changes will be noted at the top of this page with an updated date. We encourage you to review it periodically.

12. Contact

Questions, requests, or concerns about this policy or our data practices may be directed to: