Privacy Policy

1. Introduction

Bequora ("we", "us", "our") is an estate records organisation based at 130 Sanam Bin Road, Hat Yai, Songkhla 90110, Thailand. We are committed to handling the personal information of our clients and website visitors with care and transparency.

This policy explains what personal data we collect, how we use it, the legal basis for processing, and your rights under the Thailand Personal Data Protection Act B.E. 2562 (PDPA). By using our website or enquiring about our services, you confirm that you have read this policy.

For privacy-related questions, please write to: [email protected]

2. Personal Data We Collect

We collect the following categories of personal data:

• Contact details: name, email address, telephone number, and postal address when you submit an enquiry or book a session.
• Service correspondence: notes and messages exchanged as part of organising or delivering a programme.
• Website usage data: IP address, browser type, pages visited, and time on site, collected via cookies and analytics tools.

We do not collect, copy, or retain any original household documents or personal financial records. Our programmes produce written inventories and summaries only.

Legal bases for processing: consent (for marketing communications); performance of a contract (to deliver a booked programme); legitimate interests (to maintain business records and improve our service); and compliance with legal obligations.

Retention: enquiry data is held for two years from last contact. Programme records are held for seven years for accounting purposes, then deleted. Website analytics data is aggregated and anonymised after 26 months.

3. How We Use Your Data

• To respond to enquiries and arrange sessions.
• To deliver the programme or service you have requested.
• To issue invoices and maintain financial records as required by Thai law.
• To send service-related communications (appointment confirmations, follow-up messages).
• To improve our website and understand how visitors use it (analytics, non-personal).
• To send occasional information about our services, where you have provided consent.

We do not sell personal data to any third party. We do not use personal data for automated decision-making or profiling.

4. Data Sharing

We share personal data only in the following circumstances:

• Service providers: our email platform, accounting software, and website hosting provider. All are bound by data processing agreements and handle data only as instructed by us.
• Legal obligations: where required to comply with Thai law, a court order, or a lawful request from a competent authority.

We do not transfer personal data outside Thailand except where a service provider's infrastructure requires it, in which case we ensure appropriate safeguards are in place.

5. Data Protection Measures

• All data transmitted via our website is encrypted using TLS.
• Electronic records are stored in password-protected systems with role-based access.
• Physical session notes are kept in a locked cabinet at our Hat Yai premises.
• Staff access to personal data is limited to what is necessary for their role.
• In the event of a data breach, we will notify affected individuals and the relevant authority in accordance with PDPA requirements.

6. Cookies

Our website uses cookies to function properly and to understand how it is used. Essential cookies are required for the site to work. Analytics and preference cookies are only set with your consent, which you can manage via the cookie banner or our Cookie Policy.

7. Your Rights Under Thai PDPA

Under the Personal Data Protection Act B.E. 2562, you have the following rights regarding your personal data:

• Right to be informed — to know what data we hold and how it is used (this policy fulfils that obligation).
• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate data.
• Right to erasure — to ask us to delete your data where there is no lawful basis for continued retention.
• Right to restriction — to ask us to limit processing in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, write to: [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC), Thailand.

8. Third-Party Links

Our website may contain links to external websites, including Thai government offices and official resources. We are not responsible for the privacy practices of any third-party site. We encourage you to read the privacy policy of any site you visit.

9. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted personal data to us, please contact us at [email protected] and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. The most current version will always be accessible at this address. Where changes are material, we will notify active clients by email. Continued use of our website or services after the effective date of a revised policy constitutes acceptance of the changes.

11. Contact

Data Controller: Bequora
130 Sanam Bin Road, Hat Yai, Songkhla 90110, Thailand
Email: [email protected]
Telephone: +66 74 391 5260