Privacy Policy

Introduction

tessarenbd is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you engage with our AI integration consulting services or visit our website.

We operate in compliance with Thailand's Personal Data Protection Act (PDPA) and maintain strict data handling protocols throughout all our engagements. If you have any questions about our privacy practices, please contact us at [email protected].

Data Collection

Personal Data We Collect

We collect the following types of personal data:

Contact information: name, email address, phone number, business address
Professional information: job title, company name, department, role description
Communication data: inquiry details, service preferences, discussion notes
Engagement data: service usage, training participation, implementation feedback
Technical data: IP address, browser type, device information when using our website

How We Collect Data

We collect personal data through:

Contact forms on our website
Email correspondence and phone conversations
Service engagement agreements and project documentation
Discovery sessions and consultation meetings
Training program registrations and participation
Website analytics tools and cookies (see our Cookie Policy for details)

Legal Basis for Processing

We process your personal data based on:

Consent: When you provide explicit consent for specific purposes
Contract fulfillment: To deliver the services you have engaged us to provide
Legitimate interest: To improve our services, respond to inquiries, and maintain business operations
Legal obligation: To comply with applicable laws and regulations in Thailand

Data Usage

How We Use Your Data

We use personal data for the following purposes:

Delivering AI integration consulting services, training programs, and implementation support
Responding to service inquiries and providing consultation
Communicating about ongoing projects and engagement updates
Sending relevant information about our services (with your consent)
Improving our service offerings based on feedback and usage patterns
Maintaining security and preventing fraud
Complying with legal and regulatory requirements

Data Sharing and Third Parties

We do not sell your personal data. We may share your information with:

Service providers: Cloud hosting, email delivery, and analytics providers who assist in our operations
Professional advisors: Legal, accounting, and consulting partners bound by confidentiality
Legal authorities: When required by law or to protect our legal rights

All third-party service providers are carefully selected and contractually bound to protect your data according to applicable privacy laws.

Marketing Communications

We will only send you marketing communications if you have provided consent or if we have a legitimate interest in doing so. You can opt out of marketing emails at any time by clicking the unsubscribe link in any email or contacting us directly at [email protected].

Data Protection and Security

Security Measures

We implement comprehensive security measures to protect your personal data:

Encryption of data in transit and at rest using industry-standard protocols
Secure servers with regular security updates and monitoring
Access controls limiting data access to authorized personnel only
Regular security audits and vulnerability assessments
Employee training on data protection and privacy practices
Incident response procedures for potential data breaches

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

Contact inquiries: Up to two years from last contact
Service engagement data: Seven years following engagement completion (for legal and tax compliance)
Training program data: Three years following program completion
Marketing consent data: Until consent is withdrawn or two years of inactivity

After the retention period expires, we securely delete or anonymize your personal data.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant authorities within 72 hours as required by PDPA regulations. We maintain detailed incident response procedures to minimize impact and prevent recurrence.

Cookies and Website Analytics

We use cookies and similar technologies to improve your experience on our website and analyze usage patterns. These technologies help us understand how visitors interact with our site and allow us to enhance functionality.

For detailed information about the types of cookies we use, how to manage your preferences, and how to disable cookies in your browser, please refer to our Cookie Policy.

Your Rights Under PDPA

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

Right to Access

You can request access to the personal data we hold about you and receive a copy in a commonly used format.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.

Right to Data Portability

You can request transfer of your personal data to another service provider in a structured, commonly used format.

Right to Object

You can object to processing of your personal data for direct marketing purposes or where we rely on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Personal Data Protection Committee of Thailand if you believe we have not complied with applicable data protection laws.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty days.

International Data Transfers

We primarily store and process data within Thailand. When we use service providers located outside Thailand, we ensure appropriate safeguards are in place through:

Standard contractual clauses approved by relevant authorities
Verification that the receiving country provides adequate data protection
Your explicit consent where required by law

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18 without parental consent, we will take steps to delete that information promptly.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we will:

Update the "Last Updated" date at the top of this policy
Notify active clients via email of significant changes
Post a notice on our website homepage for thirty days

We encourage you to review this policy periodically to stay informed about how we protect your personal data.