Privacy Policy

1. Introduction

Chedi Vow ("we", "us", "our") is committed to handling personal data responsibly. This Privacy Policy explains what data we collect through our website and advisory engagements, how we use it, and what rights you have regarding that data.

This policy applies to all personal data processed by Chedi Vow in connection with use of the website at chedivow.blog and any consultancy services we provide. For questions or to exercise your rights, contact us at [email protected].

2. Data We Collect

We collect only the data necessary for the purposes described below. This includes:

• Identity and contact data: Name, email address, phone number, job title, and organisation name when you complete our enquiry form or correspond with us.
• Engagement data: Information you share during advisory engagements, including organisational and personnel details relevant to the scope of work. This is subject to separate confidentiality agreements.
• Technical data: IP address, browser type, operating system, and pages visited — collected via cookies and analytics tools if consent is given.
• Communication data: Email correspondence and any documents you send us.

We do not collect sensitive personal data (such as health, financial account details, or government identification numbers) through our website.

3. How We Use Your Data

We use the data we collect for the following purposes:

• Responding to enquiries and scheduling consultations
• Providing and managing advisory services under contract
• Communicating about engagements and service updates
• Improving the quality and relevance of our website content
• Complying with applicable legal and regulatory obligations in Thailand

Legal basis: We process data on the basis of your consent (for cookies and marketing communications), contract performance (for engagement-related data), legitimate interest (for enquiry management), and legal obligation (for record-keeping).

Retention: Contact and enquiry data is retained for up to 24 months. Engagement-related data is retained for up to five years following completion of an engagement, or as required by applicable law.

4. Data Sharing

We do not sell personal data to third parties. We may share data only in the following circumstances:

• Service providers: Third-party suppliers (such as email hosting, website analytics, and CRM platforms) who process data on our behalf under data processing agreements.
• Legal obligations: Where required by Thai law, court order, or regulatory authority.
• Professional advisers: Legal, accounting, or other advisers where necessary for compliance or dispute resolution purposes, under confidentiality obligations.

Where data is transferred internationally, we ensure adequate protections are in place consistent with Thailand's Personal Data Protection Act (PDPA) B.E. 2562.

5. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted data transmission (HTTPS/TLS) for all website communications
• Access controls limiting staff access to personal data on a need-to-know basis
• Regular review of data handling practices and third-party providers
• Confidentiality obligations for all team members

In the event of a personal data breach that poses a high risk to individuals, we will notify affected data subjects and the relevant supervisory authority as required by the PDPA.

6. Cookies

Our website uses cookies for basic functionality and, where you consent, for analytics purposes. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

7. Your Rights

Under Thailand's Personal Data Protection Act (PDPA) and, where applicable, other regional data protection laws, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data where we have no lawful reason to retain it.
• Right to data portability: Receive your data in a portable format where technically feasible.
• Right to object: Object to processing based on legitimate interest.
• Right to withdraw consent: Withdraw consent at any time where processing relies on consent, without affecting the lawfulness of prior processing.
• Right to lodge a complaint: File a complaint with Thailand's Personal Data Protection Committee or another relevant supervisory authority.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site before providing personal data.

9. Children's Privacy

Our services are intended for business professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website. Continued use of our website after changes take effect constitutes acceptance of the updated policy. The "Last Updated" date at the top of this page reflects the most recent revision.

11. Contact and Data Controller

Data Controller: Chedi Vow

Address: 27 Charoen Krung Soi 36, Bang Rak, Bangkok 10500, Thailand

Privacy enquiries: [email protected]

Phone: +66 2 413 6278