Legal

Privacy Policy

Last updated: 12 May 2025 | Effective date: 12 May 2025

1. Introduction

Sablehearth ("we", "us", "our") is a business consulting practice based in Bangkok, Thailand. We are committed to handling personal data responsibly and in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) and other applicable Thai law.

This policy describes what personal data we collect, how we use it, how we protect it, and what rights you have in relation to it. It applies to data collected through our website, our contact form, and in the course of our consulting engagements.

2. Data We Collect

2.1 Information you provide directly

Name, email address, and phone number (submitted through our contact form)
Business name, role, and organisation details (provided during engagement conversations)
Content of communications with us (emails, session notes)

2.2 Information collected automatically

Basic analytics data (page visits, referring pages) where consent has been given
Cookie data in line with our Cookie Policy

2.3 Legal basis for processing

We process personal data on the following legal bases: (a) consent, where you have given it; (b) performance of a contract, where processing is necessary to carry out an engagement; (c) legitimate interests, for ordinary business communications and record-keeping.

2.4 Retention periods

Contact form submissions are retained for up to 12 months. Engagement-related records are retained for up to 5 years from the close of the engagement, in line with standard business record-keeping practice. After the relevant retention period, data is securely deleted.

3. How We Use Your Data

To respond to enquiries submitted through the contact form
To plan, run, and document consulting engagements
To send engagement-related communications (session notes, drafts, maintenance notes)
To comply with legal obligations under Thai law
To improve our website and services, where consent to analytics cookies has been given

We do not use your personal data for direct marketing without your explicit consent. We do not sell personal data to third parties under any circumstances.

4. Data Sharing

We do not share personal data with third parties except in the following limited circumstances:

Service providers who assist us in operating our website (e.g. web hosting), under data processing agreements
Where required by Thai law or a valid court order

No personal data is transferred outside Thailand except where the receiving country provides an adequate level of data protection under PDPA requirements.

5. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data against unauthorised access, loss, or misuse. These include:

Access controls limiting who within Sablehearth can access personal data
Use of encrypted communications for data transmission
Secure storage of engagement documents
Regular review of data handling practices

In the event of a data breach that is likely to affect your rights or freedoms, we will notify you and the relevant Thai supervisory authority within the timeframes required by the PDPA.

6. Cookies

We use cookies on this website. Essential cookies are necessary for basic site functionality. Optional analytics and preference cookies are set only where consent has been given. For full details, see our Cookie Policy.

7. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights in relation to your personal data:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate data
Right to erasure — to request deletion of your data, subject to legal retention requirements
Right to portability — to receive your data in a structured, machine-readable format
Right to object — to object to certain types of processing
Right to withdraw consent — where processing is based on consent, you may withdraw at any time
Right to lodge a complaint — with Thailand's Personal Data Protection Committee (PDPC)

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices or content of those sites. We recommend reviewing their privacy policies independently.

9. Children's Privacy

Our services are directed at business professionals and are not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from anyone under 18.

10. Changes to This Policy

We may update this policy from time to time. Any material changes will be noted on this page with a revised effective date. Continued use of our website or services after a change constitutes acceptance of the updated policy.

11. Contact

Data controller: Sablehearth
248 Phra Ram 9 Road, Huai Khwang, Bangkok 10310, Thailand
Email: [email protected]
Phone: +66 2 374 8519