Privacy Policy
Last Updated: 15 May 2025 | Effective Date: 15 May 2025
Data Controller: Aravelle · 45 Thanon Tha Phae, Chang Khlan, Chiang Mai 50100, Thailand · [email protected]
1. Introduction
Aravelle is committed to handling any personal data you share with us with care and transparency. This policy explains what data we collect, how we use it, the legal basis for doing so, and your rights in relation to it. It applies to information collected through our website at aravellex.pro, through enquiry forms, and in the course of our consulting engagements.
We operate primarily within Thailand and in connection with clients based in Thailand. Where relevant, we comply with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and, for any processing involving individuals in the European Economic Area, the General Data Protection Regulation (GDPR).
2. What Data We Collect
We collect personal data only when it is relevant to providing our services or running our website. The categories of data we may collect include:
- Contact information: name, email address, phone number, business name
- Enquiry and message content: information you include when submitting our contact form or communicating with us by email
- Technical data: IP address, browser type, pages visited, time spent on pages — collected automatically via cookies and analytics tools where consent has been given
- Engagement data: notes, agreements, and correspondence related to consulting work — shared voluntarily during the course of an engagement
We do not collect sensitive categories of personal data and we do not collect data from individuals under the age of 18.
3. How We Use Your Data
We use the personal data we collect for the following purposes:
- To respond to enquiries and arrange consulting engagements
- To deliver the services described in our service agreements
- To communicate with you about your engagement, including scheduling and delivery of outputs
- To improve our website and understand how visitors use it (analytics, with consent)
- To comply with legal or regulatory requirements
We do not use your personal data for automated decision-making or profiling. We do not sell personal data to third parties.
4. Legal Basis for Processing
We process personal data on the following legal bases:
- Consent: for analytics cookies and marketing communications, where you have given explicit consent
- Contract: to fulfil our obligations under a service agreement
- Legitimate interests: to respond to enquiries and improve our services, where those interests do not override your rights
- Legal obligation: where processing is required to comply with applicable law
5. Data Retention
We retain personal data for as long as is necessary for the purposes for which it was collected. In practice:
- Enquiry data (contact form submissions) is retained for up to 12 months if no engagement follows
- Data related to consulting engagements is retained for up to 5 years after the engagement concludes, for record-keeping purposes
- Website analytics data is retained in accordance with the settings of the analytics platform used
After the relevant retention period, data is securely deleted or anonymised.
6. Data Sharing
We do not share personal data with third parties for commercial purposes. We may share data in limited circumstances:
- With service providers who support our operations (e.g. email platforms, cloud storage) under data processing agreements
- Where required by Thai law or court order
- With your explicit consent
Our website may use third-party services such as Google Analytics (with cookie consent). These services operate under their own privacy policies.
7. Cookies
Our website uses cookies. Essential cookies are necessary for basic functionality. Optional cookies for analytics and preferences are only set with your consent, which you can provide or withdraw via the cookie banner. For full details, see our Cookie Policy.
8. Data Security
We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. These include restricted access controls, secure email practices, and regular review of data handling procedures. In the event of a data breach that poses a risk to individuals, we will notify the relevant authority and affected individuals as required under applicable law.
9. Your Rights
Under Thai PDPA and, where applicable, GDPR, you have the following rights in relation to your personal data:
- Access: to request a copy of the personal data we hold about you
- Rectification: to request correction of inaccurate data
- Erasure: to request deletion of your data, subject to legal retention requirements
- Restriction: to request that we limit processing in certain circumstances
- Portability: to receive your data in a structured, machine-readable format where technically feasible
- Objection: to object to processing based on legitimate interests
- Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of prior processing
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If you believe your data has been handled incorrectly, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee or, where GDPR applies, the relevant supervisory authority in your country.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
11. Children's Privacy
Our services are directed to business owners and managers. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that such data has been collected inadvertently, we will delete it promptly.
12. Changes to This Policy
We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website or services after changes take effect constitutes acceptance of the revised policy.
13. Contact
For questions about this policy or about how your data is handled, please contact us:
- Email: [email protected]
- Address: 45 Thanon Tha Phae, Chang Khlan, Chiang Mai 50100, Thailand
- Phone: +66 53 271 608