Privacy Policy

1. Who We Are

Trustglen is an estate document organisation and legacy preservation service based in Hat Yai, Songkhla, Thailand. We operate as the data controller for all personal information collected through our website and our services.

Data Controller:
Trustglen
54 Phetkasem Road, Hat Yai, Songkhla 90110, Thailand
Telephone: +66 74 368 251
Email: [email protected]

2. Information We Collect

2.1 Information you provide to us

When you contact us, make an enquiry, or engage our services, we may collect:

• Full name
• Email address
• Telephone number
• Postal address (where relevant to service delivery)
• Any details you share voluntarily in enquiry messages or during sessions

2.2 Information collected automatically

When you visit our website, certain technical information may be recorded automatically, including:

• IP address and general geographic region
• Browser type and version
• Pages visited and time spent on each page
• Referring website or search query
• Device type (desktop, mobile, tablet)

This information is collected through cookies and analytics tools. Please see Section 8 for more details.

2.3 Information we do not collect

We do not collect sensitive personal data — such as financial account details, identification document numbers, or health information — unless you choose to share this during a service session. Even then, we handle such information with the utmost discretion and do not retain it beyond the purpose for which it was shared.

3. Legal Basis for Processing

Under Thailand's Personal Data Protection Act B.E. 2562 (2019), we rely on the following lawful grounds for processing your personal data:

• Consent — where you have given us clear permission, for example by submitting our contact form or accepting cookies.
• Contractual necessity — where processing is required to fulfil the service you have requested.
• Legitimate interests — for example, to maintain records of our enquiries, ensure website security, and improve our services, where this does not override your rights.
• Legal obligation — where we are required to process data to comply with applicable Thai law.

Where we rely on consent, you may withdraw that consent at any time by contacting us using the details in Section 13.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to enquiries and provide the services you have requested
• To schedule and deliver Reflective Organisation Sessions, Values & Memory Workshops, and Community Stewardship Advisories
• To send you relevant correspondence about your engagement with us (confirmation emails, follow-up notes)
• To improve our website and understand how visitors use it
• To comply with our legal and regulatory obligations under Thai law
• To maintain records for administrative and service-delivery purposes

We do not use your information for automated decision-making or profiling, nor do we use it for direct marketing without your prior consent.

5. Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share information in the following limited circumstances:

• Service providers: Trusted third-party providers who assist in operating our website and delivering services (such as website hosting or email delivery platforms). These providers are contractually required to handle data securely and only for the purposes we specify.
• Analytics providers: Anonymised or aggregated data may be shared with analytics tools to help us understand website usage patterns.
• Legal requirements: Where we are required by law, court order, or other governmental authority in Thailand to disclose information.
• Business transfers: In the unlikely event of a merger, acquisition, or transfer of all or part of our business, personal data held by us may be among the assets transferred. We will notify you via prominent notice on our website if this occurs.

In all cases, we take steps to ensure your information is handled with care and only for stated purposes.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by Thai law:

• Enquiry and contact records: Retained for up to 2 years from the date of last contact.
• Client service records: Retained for up to 5 years following the completion of services, in line with standard record-keeping practice.
• Analytics data: Aggregated and anonymised; retained in accordance with the applicable provider's policy.
• Cookie consent records: Retained for up to 12 months.

After the applicable retention period, data is securely deleted or anonymised. You may request earlier deletion — see Section 9 for your rights.

7. Security Measures

We take reasonable technical and organisational precautions to protect your personal data from unauthorised access, loss, or misuse. These include:

• Secure, encrypted website communication (HTTPS/TLS)
• Access controls limiting which staff members can view personal data
• Regular review of our data handling practices
• Secure disposal of records that are no longer required

No method of data transmission over the internet can be made entirely without risk. While we take all reasonable precautions, we cannot guarantee absolute security. If you become aware of any security concern related to your data, please contact us immediately.

8. Cookies & Similar Technologies

Our website uses cookies — small text files stored in your browser — to help us understand how the site is used and to remember your preferences. We use the following types:

• Essential cookies: Required for core website functions, such as storing your cookie consent preference. These cannot be disabled without affecting site functionality.
• Analytics cookies: Help us understand visitor behaviour in aggregate. These are only set if you accept cookies.

When you first visit our website, a notice will ask for your consent to non-essential cookies. You may accept or decline. You can also manage cookies in your browser settings at any time.

For full details on the cookies we use, please read our Cookie Policy.

9. Your Rights Under PDPA 2019

As a data subject under Thailand's Personal Data Protection Act B.E. 2562 (2019), you have the following rights in relation to your personal data:

• Right to be informed — to know how your data is being used (this policy fulfils that obligation).
• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request that inaccurate or incomplete information be corrected.
• Right to erasure — to request deletion of your data, subject to any legal retention obligations.
• Right to restriction — to ask us to pause processing your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format where technically feasible.
• Right to object — to object to processing based on our legitimate interests.
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

To exercise any of these rights, please contact us using the details in Section 13. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

10. Cross-Border Transfers

In some cases, service providers we use (for example, email or analytics platforms) may be based outside Thailand and may process your data in other countries. Where this occurs, we take steps to ensure adequate protections are in place, consistent with the requirements of PDPA 2019 and any associated ministerial regulations on cross-border transfers.

If you would like information about where a specific type of data may be transferred, please contact us.

11. Children's Privacy

Our services are directed at adults. We do not knowingly collect personal data from anyone under the age of 20 without the consent of a parent or legal guardian. If you believe we have inadvertently collected such information, please contact us and we will take prompt steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will take reasonable steps to notify you — for example, by placing a notice on our website.

We encourage you to review this page periodically to stay informed about how we handle your data.

13. Contact the Data Controller

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a concern about how your data is handled, please reach out to us:

We aim to respond to all data-related requests within 30 days. If your matter is urgent, please call us directly during office hours (Monday–Friday, 09:00–17:00; Saturday 10:00–14:00).