K
krungaxiess
Contact Us
Legal

Privacy Policy

Last Updated: 3 February 2026  |  Effective Date: 3 February 2026

1. Introduction

krungaxiess Co., Ltd. ("krungaxiess", "we", "us", or "our"), located at 55/7 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand, is committed to protecting the personal data of individuals who interact with our website and services.

This Privacy Policy describes how we collect, use, store, and protect personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and other applicable laws. It applies to all visitors to our website and individuals who contact us or engage our services.

For questions relating to this policy, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following situations:

Contact Form Submissions: When you submit a form on our website, we collect your name, email address, and any optional information you provide (such as phone number or message content).

Direct Communication: When you contact us by phone or email, we may retain the content of those communications and your contact details.

Engagement Data: When you become a client, we collect information necessary to deliver our services, including organizational context, stakeholder information, and documentation provided during the engagement.

Website Usage Data: We may collect technical information such as IP addresses, browser type, pages visited, and time spent on pages through analytics cookies (where consent is given).

3. How We Use Your Data

We use personal data for the following purposes:

  • To respond to enquiries submitted through our contact form or by direct communication
  • To deliver consulting services that you have engaged us to provide
  • To communicate with you about the progress, scope, or outcomes of an engagement
  • To send administrative information such as invoices and project documentation
  • To understand how our website is used and improve its content (analytics, with consent)
  • To comply with legal and regulatory obligations applicable to our business in Thailand

We do not use personal data for automated decision-making or profiling. We do not use personal data for direct marketing without your explicit prior consent.

4. Legal Basis for Processing

Under the Thailand PDPA, we process personal data based on the following legal grounds:

Consent: For analytics cookies and optional communications. You may withdraw consent at any time.

Contractual Necessity: Where processing is necessary to deliver services you have requested or to fulfill a contract.

Legitimate Interests: For responding to enquiries and maintaining reasonable business records, where such processing does not override your rights.

Legal Obligation: Where processing is required to comply with Thai law or regulatory requirements.

5. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this policy:

  • Contact form enquiries that do not result in an engagement: up to 12 months
  • Client engagement records: up to 5 years following the conclusion of the engagement
  • Financial records (invoices, payment records): as required by Thai accounting law, typically 5 years
  • Analytics data: according to the retention period of the analytics provider, typically 14–26 months

6. Data Sharing

We do not sell, rent, or trade personal data. We may share data with the following categories of parties where necessary:

Service Providers: Third-party services such as email platforms, cloud storage providers, and website analytics tools that process data on our behalf under data processing agreements.

Legal and Regulatory Authorities: Where required by Thai law, court order, or regulatory requirement.

We do not transfer personal data outside Thailand without appropriate safeguards as required by the PDPA.

7. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure. These include:

  • Secure, encrypted storage for digital records
  • Access controls limiting data access to staff who require it for their role
  • Signed NDAs with team members and third-party processors
  • Incident response procedures in the event of a data breach

In the event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority as required by the PDPA.

8. Cookies

Our website uses cookies to function correctly and, with your consent, to collect analytics data. For detailed information about the types of cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Your Rights

Under the Thailand PDPA, you have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data where there is no lawful basis for continued processing
  • Right to Data Portability: Receive your data in a structured, commonly used format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time for consent-based processing, without affecting the lawfulness of prior processing
  • Right to Lodge a Complaint: Submit a complaint to the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately.

11. Children's Privacy

Our services are intended for business organizations and individuals aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on this page, with the "Last Updated" date revised accordingly. Continued use of our website or services after a policy update constitutes acceptance of the revised terms.

13. Contact

For any questions or requests related to this Privacy Policy or your personal data:

krungaxiess Co., Ltd.

55/7 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand

Email: [email protected]

Phone: +66 2 871 4603