Garuda Forge Company Limited ("Garuda Forge", "we", "us", or "our") operates the website at this domain and provides business consulting services from our office at 203 Wireless Road, Lumpini, Bangkok 10330, Thailand. We are committed to handling your personal information responsibly and in compliance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and other applicable laws.
This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using our website or engaging our services, you acknowledge you have read and understood this policy.
1. Data Controller
For the purposes of the PDPA, Garuda Forge Company Limited is the Data Controller for personal data collected through this website and through our service engagements. If you have questions about how we handle your data, please contact us at:
- Address: 203 Wireless Road, Lumpini, Bangkok 10330, Thailand
- Phone: +66 2 712 3946
- Email: [email protected]
2. Information We Collect
We collect personal information in the following ways:
Information you provide directly:
- Name and contact details (email address, phone number, company name) submitted through our contact form
- Messages and enquiry content you submit to us
- Information shared during service engagements (project-related documents, business data necessary for delivering advisory work)
Information collected automatically:
- IP address, browser type, operating system, referring URLs, and pages visited — collected via server logs and analytics tools
- Cookie identifiers and usage data if you have consented to analytics or marketing cookies (see our Cookie Policy)
3. Legal Bases for Processing
Under the PDPA, we process your personal data on the following legal bases:
- Consent: Where you have given clear consent, such as when submitting our contact form or accepting non-essential cookies.
- Contract: Where processing is necessary to deliver services you have engaged us for, or to take pre-contractual steps at your request.
- Legitimate interests: Where we have a legitimate business interest, such as improving our website, maintaining security, and sending relevant service communications to existing clients.
- Legal obligation: Where processing is necessary to comply with applicable Thai law or regulatory requirements.
4. How We Use Your Information
We use the information we collect to:
- Respond to enquiries submitted through our contact form
- Deliver consulting services and manage client engagements
- Send service-related communications (project updates, deliverables, invoices)
- Improve the functionality and content of our website
- Analyze website usage patterns to understand how visitors interact with our content (analytics, subject to your cookie consent)
- Comply with legal and regulatory obligations under Thai law
- Protect against fraud, unauthorized access, and other security risks
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on our website. Some cookies are necessary for the website to function, while others help us analyze usage and measure the effectiveness of our marketing. You may manage your cookie preferences at any time through our Cookie Policy page.
Third-party services we may use, subject to your consent, include Google Analytics 4, Meta Pixel, and Microsoft Clarity. Each operates under its own privacy policy.
6. Sharing Your Information
We may share your personal information with:
- Service providers: Third-party vendors who assist with website hosting, email delivery, analytics, and CRM functions — bound by data processing agreements.
- Professional advisors: Lawyers, accountants, and auditors where necessary for our legal and compliance obligations.
- Regulatory authorities: Government bodies, regulators, or law enforcement agencies when required by applicable Thai law.
- Business transfers: In the event of a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction, with appropriate notice provided.
We do not transfer personal data outside of Thailand without ensuring appropriate safeguards are in place in accordance with PDPA requirements.
7. Data Retention
We retain personal data for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Specifically:
- Contact form enquiries: up to 24 months from submission date
- Client engagement records: 7 years from project completion, in line with Thai accounting and legal requirements
- Website analytics data: subject to the retention periods of the respective analytics provider (typically 14–26 months)
When data is no longer needed, we securely delete or anonymize it.
8. Your Rights Under the PDPA
Thailand's Personal Data Protection Act grants you the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may ask us to correct inaccurate or incomplete data.
- Right to erasure: You may request deletion of your data where it is no longer necessary or where consent has been withdrawn.
- Right to restriction: You may ask us to restrict processing of your data in certain circumstances.
- Right to data portability: Where technically feasible, you may request transfer of your data in a structured, machine-readable format.
- Right to object: You may object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at the address above. We will respond within 30 days of receiving your request.
9. Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, and destruction. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. While we take reasonable precautions, no system can be completely secure, and we encourage you to contact us promptly if you have concerns about your data's security.
10. Children's Privacy
Our website and services are directed to business professionals and are not intended for individuals under the age of 20. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website following any changes constitutes acceptance of the updated policy.
12. Contact and Complaints
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Post: Garuda Forge Company Limited, 203 Wireless Road, Lumpini, Bangkok 10330
- Phone: +66 2 712 3946
- Email: [email protected]
If you believe your rights under the PDPA have not been respected, you have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.