Legal

Privacy Policy

Last Updated: 15 May 2025  |  Effective Date: 15 May 2025

Data Controller: Aravelle · 45 Thanon Tha Phae, Chang Khlan, Chiang Mai 50100, Thailand · [email protected]

1. Introduction

Aravelle is committed to handling any personal data you share with us with care and transparency. This policy explains what data we collect, how we use it, the legal basis for doing so, and your rights in relation to it. It applies to information collected through our website at aravellex.pro, through enquiry forms, and in the course of our consulting engagements.

We operate primarily within Thailand and in connection with clients based in Thailand. Where relevant, we comply with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and, for any processing involving individuals in the European Economic Area, the General Data Protection Regulation (GDPR).

2. What Data We Collect

We collect personal data only when it is relevant to providing our services or running our website. The categories of data we may collect include:

We do not collect sensitive categories of personal data and we do not collect data from individuals under the age of 18.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

We do not use your personal data for automated decision-making or profiling. We do not sell personal data to third parties.

4. Legal Basis for Processing

We process personal data on the following legal bases:

5. Data Retention

We retain personal data for as long as is necessary for the purposes for which it was collected. In practice:

After the relevant retention period, data is securely deleted or anonymised.

6. Data Sharing

We do not share personal data with third parties for commercial purposes. We may share data in limited circumstances:

Our website may use third-party services such as Google Analytics (with cookie consent). These services operate under their own privacy policies.

7. Cookies

Our website uses cookies. Essential cookies are necessary for basic functionality. Optional cookies for analytics and preferences are only set with your consent, which you can provide or withdraw via the cookie banner. For full details, see our Cookie Policy.

8. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. These include restricted access controls, secure email practices, and regular review of data handling procedures. In the event of a data breach that poses a risk to individuals, we will notify the relevant authority and affected individuals as required under applicable law.

9. Your Rights

Under Thai PDPA and, where applicable, GDPR, you have the following rights in relation to your personal data:

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you believe your data has been handled incorrectly, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee or, where GDPR applies, the relevant supervisory authority in your country.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. Children's Privacy

Our services are directed to business owners and managers. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that such data has been collected inadvertently, we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website or services after changes take effect constitutes acceptance of the revised policy.

13. Contact

For questions about this policy or about how your data is handled, please contact us: