Privacy Policy

Introduction

Sangha Edge is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and protect information when you interact with our business consulting services or visit our website.

Our practices comply with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (PDPA) and reflect our commitment to transparent data handling. This policy applies to all personal data we process in connection with our consulting services.

For questions about this policy or our data practices, please contact our privacy team at privacy@sangheso

Information We Collect

Personal Information You Provide

When you contact us or engage our consulting services, we may collect:

• Name and contact details (email address, phone number, business address)
• Business information (company name, position, industry sector)
• Communication preferences and correspondence history
• Information provided during consultation or diagnostic engagements
• Payment and billing information when processing transactions

Information Collected Automatically

When you visit our website, we may automatically collect:

• Device and browser information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, navigation patterns)
• Cookie data (as described in our Cookie Policy)
• Referral source information

Information from Third Parties

In some cases, we may receive information about you from business partners, professional referrals, or publicly available sources to better understand your business context when providing consulting services.

How We Use Your Information

We process your personal data for the following purposes:

Service Delivery

• Providing consulting services you have requested
• Conducting business diagnostics, partnership analysis, or succession planning
• Communicating with you about engagements and deliverables
• Processing payments and maintaining transaction records

Business Operations

• Responding to inquiries and providing customer support
• Improving our services and website functionality
• Conducting quality assurance and internal review processes
• Maintaining business records and documentation

Legal and Compliance

• Complying with legal obligations and regulatory requirements
• Protecting against fraud and security threats
• Enforcing our terms of service and agreements
• Resolving disputes and legal claims

Marketing Communications (With Consent)

• Sending newsletters and service updates (only if you opt in)
• Informing you about relevant consulting insights or resources
• You may withdraw consent at any time using the unsubscribe link in communications

Legal Basis for Processing

Under the Thai PDPA, we process your personal data based on:

• Contract Performance: Processing necessary to fulfill consulting service agreements
• Consent: When you have provided explicit consent for specific processing activities
• Legitimate Interests: For business operations, service improvement, and fraud prevention
• Legal Obligation: When required by Thai law or regulatory authorities

Information Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

Service Providers

We work with third-party service providers who assist with:

• Website hosting and technical infrastructure
• Payment processing and financial services
• Data analytics and business intelligence tools
• Communication platforms (email, messaging)

These providers are bound by confidentiality agreements and may only use your information as directed.

Professional Advisors

We may share information with legal, financial, or other professional advisors when necessary for business operations or legal compliance.

Legal Requirements

We may disclose information when required by law, court order, or government authority, or to protect our legal rights and interests.

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure servers with access controls and monitoring
• Regular security assessments and updates
• Employee training on data protection practices
• Incident response procedures for data breaches

While we strive to protect your information, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but maintain industry-standard safeguards.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy:

• Client Records: Maintained for 7 years following engagement completion for professional and legal requirements
• Marketing Communications: Until you unsubscribe or request deletion
• Website Data: Analytics data retained for 24 months
• Financial Records: Kept for 7 years in accordance with Thai accounting regulations

Your Rights

Under the Thai PDPA, you have the following rights regarding your personal data:

• Access: Request confirmation of what personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete information
• Erasure: Request deletion of your personal data (subject to legal requirements)
• Data Portability: Receive your data in a structured, commonly used format
• Objection: Object to processing based on legitimate interests
• Restriction: Request limitation of processing in certain circumstances
• Withdraw Consent: Revoke consent for consent-based processing activities

To exercise these rights, please contact us at privacy@sangheso. We will respond within 30 days of receiving your request.

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Committee of Thailand.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyze website usage. For detailed information about our cookie practices, please review our Cookie Policy.

You can manage cookie preferences through your browser settings or our cookie consent tool.

International Data Transfers

Your personal data is primarily stored and processed in Thailand. If we transfer data outside Thailand, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by Thai authorities
• Adequacy decisions for countries with equivalent data protection standards
• Your explicit consent for specific transfers

Children's Privacy

Our services are designed for businesses and professionals. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have collected information from a minor, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify active clients via email of significant changes
• Post notice on our website for a reasonable period

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: