Privacy Policy

Introduction

Govvara is committed to protecting the privacy and personal data of individuals who interact with our corporate governance and compliance services. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable data protection regulations.

By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you have questions or concerns about our data protection practices, please contact us at [email protected].

Data Controller Information

Company Name: Govvara

Address: 62 Langsuan Road, Lumpini, Pathumwan, Bangkok 10330, Thailand

Email: [email protected]

Govvara acts as the data controller for personal information collected through our website and service engagements.

Personal Data We Collect

Information You Provide Directly

We collect personal data that you voluntarily provide when:

• Submitting inquiry forms through our website
• Requesting consultations or information about our services
• Engaging us for governance framework development or compliance services
• Communicating with us via email or phone
• Attending meetings or consultations

This information may include:

• Name and contact details (email address, phone number)
• Job title and organization name
• Professional background relevant to service engagement
• Communication preferences

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referral source and navigation patterns

Cookies and Similar Technologies

We use cookies and similar technologies to enhance website functionality and user experience. For detailed information about our cookie practices, please review our Cookie Policy.

How We Use Your Personal Data

We process your personal data for the following purposes:

Service Delivery

• Responding to inquiries about our governance and compliance services
• Providing consultations and service proposals
• Delivering contracted services (framework development, compliance programs, meeting administration)
• Managing client relationships and project communications

Legal and Contractual Obligations

• Fulfilling contractual obligations with clients
• Maintaining records required by Thai law
• Complying with legal and regulatory requirements
• Protecting our legal rights and interests

Website Improvement and Analytics

• Analyzing website usage to improve functionality
• Understanding visitor preferences and behavior
• Enhancing security and preventing fraud

Communication

• Sending service-related information and updates
• Providing responses to your questions or requests
• Sharing information about our services where you have provided consent

Legal Basis for Processing

Under the PDPA, we process your personal data based on the following legal grounds:

• Consent: Where you have provided explicit consent for specific processing activities
• Contract Performance: Where processing is necessary to fulfill our contractual obligations with you
• Legal Obligation: Where processing is required to comply with Thai law and regulations
• Legitimate Interest: Where processing is necessary for our legitimate business interests, provided this does not override your fundamental rights

Data Sharing and Disclosure

We maintain strict confidentiality of your personal data. We may share your information only in the following circumstances:

Service Providers

We may engage third-party service providers to support our operations, such as:

• Website hosting and IT infrastructure providers
• Email communication services
• Professional advisors (legal, accounting) under confidentiality obligations

Legal Requirements

We may disclose personal data when required by Thai law, court orders, or regulatory authorities, or to protect our legal rights and interests.

Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to continued privacy protection.

We do not sell or rent your personal data to third parties for marketing purposes.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Service Engagement Data: Retained for the duration of the service engagement plus 7 years for legal and tax compliance purposes
• Inquiry Data: Retained for 2 years from the date of inquiry or until you request deletion
• Website Analytics Data: Retained for 26 months in accordance with analytics platform standards
• Cookie Data: Retention periods vary by cookie type as described in our Cookie Policy

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit and at rest
• Access controls limiting data access to authorized personnel only
• Regular security assessments and updates
• Secure storage systems with backup procedures
• Confidentiality obligations for all staff and contractors

While we take reasonable measures to protect your data, no method of transmission over the Internet is completely secure. We cannot guarantee absolute security of information transmitted through our website.

Your Rights Under Thai PDPA

Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:

Right to Access

You may request access to your personal data we hold and receive information about how we process it.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data where there is no legitimate reason for us to continue processing it, subject to legal retention requirements.

Right to Restriction of Processing

You may request that we limit the processing of your personal data in certain circumstances.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used format or request that we transfer it to another data controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Personal Data Protection Committee or relevant supervisory authority if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by Thai law (typically 30 days).

International Data Transfers

Your personal data is primarily stored and processed within Thailand. In certain circumstances, we may transfer data to service providers located outside Thailand. When such transfers occur, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by Thai authorities
• Transfers to countries recognized as providing adequate data protection
• Your explicit consent where required

Children's Privacy

Our services are directed at organizations and professionals. We do not knowingly collect personal data from individuals under 20 years of age (the age of majority in Thailand). If you believe we have inadvertently collected data from a minor, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post the revised policy on our website
• Notify existing clients of significant changes via email where appropriate

We encourage you to review this Privacy Policy periodically to stay informed about our data protection practices.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us: