LEGAL DOCUMENT
Privacy Policy
Verdant · Last updated: 7 March 2025
Verdant is committed to handling your personal information with care. This policy explains what data we collect, why we collect it, how it is used, and the rights available to you under applicable law — including Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
By using our website or engaging with our services, you acknowledge that you have read and understood this policy. If you have questions, please contact us at [email protected].
1. Data Controller
The data controller for personal information collected through this website and our programmes is:
Verdant
87 Ratchadamri Road, Lumphini, Pathum Wan, Bangkok 10330
Email: [email protected]
Phone: +66 2 254 6918
2. Information We Collect
We collect personal information only when it is provided directly by you or arises from your use of this website. The categories of information we may collect include:
- Contact information: name, email address, and phone number submitted through our enquiry form
- Enquiry content: any message or description you include when contacting us
- Programme participation data: information shared during workshops or advisory sessions, including financial background provided voluntarily through our questionnaires
- Technical data: browser type, device type, pages visited, and approximate location — collected automatically via cookies and analytics tools
We do not collect sensitive personal data (such as health information, biometric data, or national identification numbers) unless explicitly required for a specific service and with your prior consent.
3. Legal Basis for Processing
We process personal information on the following grounds:
- Consent: where you have given clear consent for a specific purpose, such as receiving communications from us or accepting analytics cookies
- Contract performance: to deliver the services you have engaged us to provide
- Legitimate interests: for purposes such as improving our website, responding to enquiries, and maintaining records of engagements — where these interests are not overridden by your rights
- Legal obligation: where processing is necessary to comply with applicable Thai law
4. How We Use Your Information
Enquiries and contact
Information submitted through our contact form is used to respond to your enquiry and, where relevant, to arrange or deliver a programme. We do not add you to any mailing list without your explicit consent.
Programme delivery
Information shared during advisory sessions or workshops is used solely to deliver the service and to produce the written summaries and documents that form part of each engagement. It is not shared with third parties.
Website improvement
We use aggregated, anonymised analytics data to understand how visitors use our website and to improve its content and structure. This data does not identify individual users.
5. Data Sharing
We do not sell, rent, or trade personal information. We may share data only in the following limited circumstances:
- Service providers: third-party tools that support our website operations (such as hosting, analytics, or email delivery), who are bound by confidentiality obligations and may not use your data for their own purposes
- Legal requirements: where disclosure is required by law, court order, or regulatory authority
We currently use Google Analytics for website traffic analysis. Google may process data in accordance with its own privacy terms. You may opt out of analytics cookies via our cookie preferences.
6. Data Retention
We retain personal information for as long as is necessary for the purposes described in this policy:
- Enquiry records: up to 12 months after the last contact, unless you become a programme participant
- Programme records: up to 5 years following the conclusion of an engagement, to allow for follow-up queries and to meet any applicable record-keeping obligations
- Analytics data: retained in anonymised form for up to 26 months, in line with standard analytics platform practices
After these periods, data is deleted or permanently anonymised.
7. Data Security
We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or disclosure. These include access controls, use of encrypted connections for data transmission, and restricted access to client records. In the event of a data breach that is likely to affect your rights, we will notify you and the relevant supervisory authority within the timeframes required by law.
8. Cookies
Our website uses cookies to support core functionality and to collect analytics data. Essential cookies cannot be disabled as they are necessary for the site to operate. Optional cookies (including analytics and preference cookies) require your consent. You can manage your cookie preferences at any time via our Cookie Policy page.
9. Your Rights
Under Thailand's PDPA and, where applicable, other data protection laws, you have the following rights in relation to your personal information:
- Right of access: to request a copy of the personal data we hold about you
- Right to rectification: to request correction of inaccurate or incomplete data
- Right to erasure: to request deletion of your data, subject to any legal retention obligations
- Right to restriction: to request that we limit how we use your data in certain circumstances
- Right to data portability: to receive your data in a structured, commonly used format
- Right to object: to object to processing based on legitimate interests
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your data has been handled improperly.
10. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their own policies before providing any personal information.
11. Children's Privacy
Our services are intended for adults aged 18 and above. We do not knowingly collect personal information from individuals under 18. If you believe a minor has submitted information through our website, please contact us so that we can remove it promptly.
12. International Data Transfers
Our primary operations and data storage are based in Thailand. Where third-party service providers process data outside Thailand (for example, cloud infrastructure or analytics platforms), we ensure that appropriate safeguards are in place consistent with PDPA requirements.
13. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or applicable law. The updated date at the top of this page will reflect the most recent revision. For material changes, we will take reasonable steps to notify affected individuals.
14. Contact
For any questions, requests, or concerns relating to this policy or the handling of your personal data, please contact:
Verdant — Data Enquiries
Email: [email protected]
Phone: +66 2 254 6918
87 Ratchadamri Road, Lumphini, Pathum Wan, Bangkok 10330