Privacy Policy

1. About this policy

This privacy policy describes how Mossvale ("we", "us", "our") handles personal information collected through this website and in the course of providing consulting services. We are committed to handling personal data with care and in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand.

By using this website or submitting an enquiry, you acknowledge that you have read and understood this policy.

2. Information we collect

We collect personal information only when you choose to provide it. This may include:

• Name and contact details (email address, telephone number) submitted via the website contact form
• Organisation name and role, where provided
• The content of messages or enquiries you send to us
• Technical information collected automatically when you visit our website, such as your IP address, browser type, and pages visited

We do not collect sensitive personal data (as defined by the PDPA) through this website.

3. How we use personal information

Personal information collected through this website is used to:

• Respond to enquiries and assess whether an engagement would be appropriate
• Communicate with prospective and current clients about our services
• Maintain records of client engagements for administrative purposes
• Understand how our website is used, in order to improve it

We do not use personal information for automated decision-making, and we do not sell, rent, or share personal data with third parties for marketing purposes.

4. Legal basis for processing

We process personal data on the following bases:

• Contract: where processing is necessary to take steps at your request prior to entering into an engagement, or to carry out the terms of an agreement.
• Legitimate interests: where we have a legitimate business reason to process data (such as responding to an unsolicited enquiry), and that interest is not overridden by your rights.
• Consent: where you have specifically agreed to the use of your data for a particular purpose, such as receiving communications from us.

5. Data retention

We retain personal data only for as long as necessary. Enquiry data is kept for up to 12 months from the date of last contact if no engagement is established. Engagement records are kept for up to 5 years following the conclusion of the engagement, in line with standard business record-keeping practice.

Where data is no longer required, we delete or anonymise it in a secure manner.

6. Cookies and website tracking

This website uses cookies and similar technologies. A summary of the cookies we use is provided in our Cookie Policy. You may manage your cookie preferences at any time using the consent notice on this website.

7. Third-party services

Our website uses the following third-party services that may process data:

• Google Fonts: loaded from Google's servers; subject to Google's privacy policy.
• Google Maps: an embedded map on our homepage; subject to Google's privacy policy.
• Cloudflare CDN: used to serve some website assets; subject to Cloudflare's privacy policy.

We do not otherwise share personal data with third parties except where required by law or with your explicit agreement.

8. Your rights

Under the PDPA and applicable data protection law, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data, subject to our legitimate retention needs
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Personal Data Protection Committee of Thailand

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable timeframe and in accordance with applicable law.

9. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. However, no method of electronic transmission or storage is entirely without risk. If you have concerns about the security of information you have shared with us, please contact us directly.

10. Changes to this policy

We may update this privacy policy from time to time. Any material changes will be reflected in the "last updated" date at the top of this page. We encourage you to review this page periodically.

11. Contact

For any questions or requests relating to this privacy policy or the personal data we hold, please contact: