Privacy Policy

1. Introduction

Panya Nava Co., Ltd. ("Panya Nava", "we", "us", "our") is committed to handling personal data responsibly and transparently. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over your information.

This policy applies to personal data collected through our website at panyanava.blog and through our direct business engagements. For questions, contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, telephone number
• Business information: job title, company name, industry
• Enquiry content: information shared through our contact form or email
• Website usage data: pages visited, time on site, device type (via analytics cookies, with your consent)
• Engagement data: information shared during consulting and training work, subject to separate confidentiality agreements

We collect personal data through our contact form, direct email, phone conversations, and (with consent) through analytics tools.

3. Legal Basis for Processing

We process personal data under the following legal bases, in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

• Consent: for marketing communications and optional analytics cookies
• Contractual necessity: to deliver services to clients
• Legitimate interests: to respond to enquiries, improve our services, and maintain business records
• Legal obligation: where required by Thai law

4. How We Use Your Data

• Responding to enquiries and consultation requests
• Delivering agreed consulting and training services
• Sending relevant updates about our services (with consent)
• Improving our website and communications
• Maintaining business records and meeting legal obligations

We do not sell personal data to third parties, and we do not use personal data for automated decision-making that has legal or similarly significant effects.

5. Data Sharing

We share personal data only in limited circumstances:

• Service providers: email hosting, website analytics — bound by data processing agreements
• Legal requirements: where required by Thai law or competent authority
• Business transitions: in the event of a merger or acquisition, subject to equivalent privacy protections

Client operational data shared during engagements is governed by separate non-disclosure agreements and is never used for any purpose beyond the scope of that engagement.

6. Data Security

We apply ISO 27001-aligned data handling practices, including:

• Encrypted transmission of data (HTTPS)
• Access controls limiting data to authorised staff only
• Secure storage with defined retention periods
• Regular review of data handling practices

In the event of a data breach affecting your rights, we will notify affected individuals within 72 hours where required by applicable law.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy:

• Enquiry data: up to 24 months from last contact
• Client engagement data: up to 5 years for business record purposes
• Marketing preferences: until withdrawn
• Analytics data: up to 26 months (in aggregate form)

8. Cookies

Our website uses cookies for essential functionality and (with your consent) for analytics purposes. You can manage your cookie preferences at any time via our Cookie Policy page.

9. Your Rights Under Thai PDPA

As a data subject under Thailand's PDPA, you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to processing based on legitimate interests
• Withdraw consent at any time (without affecting prior processing)
• Request data portability in a readable format
• Lodge a complaint with Thailand's Personal Data Protection Committee

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. Children's Privacy

Our services are intended for business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently done so, we will delete the data promptly.

12. Changes to This Policy

We may update this policy as our practices or legal requirements change. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

For any data protection enquiries:

• Email: [email protected]
• Address: Panya Nava Co., Ltd., 349/2 Soi Sukhumvit 55 (Thonglor), Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand
• Phone: +66 2 714 8326