Legal Documentation
Privacy Policy
Last Updated: 15 February 2026 · garudadigas Co., Ltd.
garudadigas Co., Ltd. ("we," "us," "our") is committed to protecting the personal data of individuals who interact with our services, website, and consulting programs. This policy explains what data we collect, how it is used, and what rights you hold under applicable law — including Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
1. Who We Are
Data Controller: garudadigas Co., Ltd.
Address: 156 Phahonyothin Road, Chatuchak, Bangkok 10900, Thailand
Contact: [email protected]
2. Data We Collect
Information you provide directly:
- Name and surname
- Email address
- Phone number (if provided)
- Organisation name and role
- Message content submitted via our contact form
Data collected automatically:
- Browser type and operating system
- IP address (anonymized after 90 days)
- Pages visited and session duration
- Referral source
Data provided during engagements:
When clients participate in consulting or training programs, they may share organisational data for analysis purposes. All such data is covered by a separate Data Processing Agreement and is anonymized before use.
3. Legal Basis for Processing
- Consent: For marketing communications and non-essential cookies, where you have given explicit consent.
- Contractual necessity: To deliver the consulting or training services you have engaged us for.
- Legitimate interests: For website analytics and service improvement, where these do not override your rights.
- Legal obligation: Where required under Thai law or other applicable regulations.
4. How We Use Your Data
- To respond to enquiries submitted through our website
- To manage and deliver consulting and training engagements
- To send information about our programs, where you have consented
- To analyse website usage and improve our content
- To comply with legal and regulatory obligations
5. Data Sharing
We do not sell personal data. We may share information with:
- Service providers: Web hosting, email delivery, and analytics platforms, under data processing agreements.
- Professional advisors: Legal and accounting professionals, under confidentiality obligations.
- Authorities: Where required by Thai law or court order.
6. Data Retention
- Contact enquiries: 3 years from receipt, unless a client relationship develops
- Client project data: 5 years from project completion, then securely deleted
- Website analytics data: 26 months, then anonymized
- Engagement data covered by DPA: deleted within 30 days of engagement close
7. Security Measures
We apply information security practices aligned with ISO 27001 principles, including:
- Encrypted data transmission (TLS)
- Access controls limiting data to authorised personnel only
- Regular review of data handling procedures
- Incident response procedures for potential breaches
8. Cookies
Our website uses cookies for functional operation and analytics. For full details, including how to manage your preferences, see our Cookie Policy.
9. Your Rights Under Thai PDPA
As a data subject under Thai law, you have the right to:
- Access your personal data held by us
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Withdraw consent at any time (for consent-based processing)
- Object to processing based on legitimate interests
- Request data portability in a structured, machine-readable format
- Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC Thailand)
To exercise any of these rights, contact: [email protected]. We will respond within 30 days.
10. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies directly.
11. Children's Privacy
Our services are directed at business professionals and organisations. We do not knowingly collect data from individuals under 18 years of age. If such data is brought to our attention, we will delete it promptly.
12. International Data Transfers
Personal data is primarily stored on servers located in Thailand or within the Asia-Pacific region. Where data is transferred outside Thailand, appropriate safeguards are in place in accordance with PDPA requirements.
13. Policy Updates
We may update this policy periodically. Significant changes will be communicated via our website. The "Last Updated" date at the top of this page indicates when the current version was issued.
14. Contact Us
For privacy-related enquiries:
Email: [email protected]
Address: 156 Phahonyothin Road, Chatuchak, Bangkok 10900, Thailand