Privacy Policy

Siri Forge ("we", "us", "our") is committed to handling personal data responsibly and in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). This Policy explains what data we collect, how we use it, and what rights you have.

1. Introduction and Scope

This Privacy Policy applies to personal data collected through our website at siriforgevss, through our contact form, and in the course of providing our consulting services. It applies to clients, prospective clients, and website visitors.

Our data controller details: Siri Forge · 71/3 Rama II Road, Samae Dam, Bang Khun Thian, Bangkok 10150, Thailand · privacy@siriforgevss

2. Personal Data We Collect

We may collect the following categories of personal data:

• Contact data: Name, email address, telephone number
• Business data: Company name, job title, business address
• Communication data: Messages and correspondence submitted via our contact form or email
• Usage data: Pages visited, browser type, IP address (collected via analytics cookies, if consented)

We collect this data when you submit our contact form, communicate with us directly, or browse our website with analytics cookies enabled.

3. Legal Basis for Processing

Under the PDPA, we rely on the following lawful bases:

• Consent: For analytics cookies and marketing communications
• Contractual necessity: For processing data related to service engagements
• Legitimate interests: For responding to enquiries and improving our services
• Legal obligation: Where required to comply with Thai law

4. How We Use Personal Data

• Responding to enquiries submitted through our contact form
• Delivering consulting services and engagement deliverables
• Communicating updates relevant to an ongoing engagement
• Sending service-related communications (not marketing without consent)
• Improving our website and understanding how visitors use it
• Complying with legal and regulatory requirements

We do not use client data for AI model training. We do not sell personal data to third parties.

5. Data Retention

We retain personal data for the following periods:

• Enquiry data: 12 months from last contact if no engagement follows
• Client engagement data: 5 years from engagement close (for contractual and tax purposes)
• Analytics data: Anonymised after 13 months

6. Data Sharing with Third Parties

We may share limited personal data with:

• Email service providers: For sending service communications
• Analytics services: If you have consented to analytics cookies (e.g., Google Analytics)
• Legal authorities: Where required by Thai law or court order

We do not share your data with advertising networks or data brokers.

7. Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data, including:

• Encrypted transmission of data via HTTPS
• Access controls limiting data access to authorised staff only
• Regular review of data handling practices
• Contractual data protection obligations with any third-party processors

In the event of a data breach affecting your rights, we will notify you and the relevant authority within the timeframe required by the PDPA.

8. Cookies

We use essential cookies for site functionality and, with your consent, analytics cookies to understand website usage. See our Cookie Policy for full details and preference management options.

9. Your Rights Under the PDPA

As a data subject under Thailand's PDPA, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data where there is no longer a lawful basis for processing
• Restriction: Request that we limit processing of your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdrawal of consent: Withdraw consent at any time for consent-based processing

To exercise any of these rights, contact us at privacy@siriforgevss. We will respond within 30 days.

If you believe your rights have been violated, you may lodge a complaint with Thailand's Personal Data Protection Committee.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of external sites and recommend reviewing their privacy policies independently.

11. Children's Privacy

Our services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have collected data from a minor, we will delete it promptly.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated via our website. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our website or services following an update constitutes acceptance of the revised Policy.

13. Contact

For privacy-related enquiries, contact us at:

• Email: privacy@siriforgevss
• Address: Siri Forge, 71/3 Rama II Road, Samae Dam, Bang Khun Thian, Bangkok 10150, Thailand