Privacy Policy

1. Data Controller

Orinthos is the data controller for personal data collected through this website and through our consulting engagements. Our registered office is at 14/2 Wireless Road, Lumpini, Pathum Wan, Bangkok 10330, Thailand. For data-related questions, contact us at [email protected].

2. Data We Collect

We collect personal data in the following circumstances:

• Contact form submissions: Name, email address, phone number (optional), and message content.
• Consulting engagements: Business contact details, organizational information, and any personal data shared during the course of the engagement.
• Website analytics: Technical data such as IP address, browser type, pages visited, and session duration — collected via analytics cookies (with consent).
• Marketing preferences: Records of consent or opt-out for marketing communications.

We do not collect sensitive personal data (health, political views, financial account details) through this website.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries submitted through our contact form
• Delivering and managing consulting engagements
• Communicating about services relevant to your situation (where you have consented)
• Improving our website and services through aggregated analytics
• Complying with legal and regulatory obligations under Thai law

The legal basis for processing is: contract performance (for engagement delivery), legitimate interest (for enquiry responses and service improvement), and consent (for marketing and analytics cookies).

4. Data Retention

Contact enquiry data is retained for up to 24 months. Engagement records are retained for 5 years following the close of an engagement, in line with standard business record-keeping requirements. Analytics data is retained for 14 months. You may request deletion of your data at any time — see Section 7.

5. Data Sharing

We do not sell personal data. We may share data with:

• Analytics providers: Google Analytics (under data processing agreements) — analytics cookies require your consent.
• Email service providers: For sending enquiry confirmations and communications.
• Legal authorities: Where required by Thai law or court order.

Engagement client data is never shared across engagements or disclosed to other clients.

6. Data Security

We maintain appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure. Our website uses HTTPS encryption. Access to client data within the firm is limited to those directly involved in the relevant engagement. In the event of a data breach affecting your rights, we will notify you as required under Thailand's PDPA.

7. Your Rights

Under Thailand's Personal Data Protection Act (PDPA), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict processing of your data
• Withdraw consent at any time for consent-based processing
• Request data portability in a structured format
• Lodge a complaint with Thailand's Personal Data Protection Committee

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies

We use essential cookies for basic site functionality and optional analytics and preference cookies with your consent. For full details, see our Cookie Policy.

9. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently.

10. Children's Privacy

Our services are intended for adults (18 years and over). We do not knowingly collect personal data from individuals under 18. If you believe we have collected data from a minor, contact us immediately at [email protected].

11. Policy Updates

We may update this policy from time to time. Material changes will be communicated via notice on this page. The "Last Updated" date at the top of this page reflects when the policy was last revised. Continued use of our website following any update constitutes acceptance of the revised policy.

12. Contact for Data Matters

For any questions or requests related to your personal data, contact us at: