Legal & Compliance
Privacy Policy
Synthara is committed to handling your personal information with care and transparency. This policy describes what data we collect, why we collect it, and how it is used, stored, and protected — in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable international standards.
Last Updated: 28 March 2026 | Effective Date: 28 March 2026
1. Introduction & Scope
This Privacy Policy applies to all individuals who visit the Synthara website, submit enquiries through our contact form, or engage with Synthara in the context of an advisory or technical engagement. It covers personal data collected via our website, communications channels, and professional service relationships.
Synthara acts as the data controller for personal information provided directly to us. If you have questions about this policy or the data we hold, please contact us at [email protected].
2. Data We Collect
We collect personal data only when there is a clear purpose and a lawful basis for doing so. The categories of data we may collect include:
- Contact Information: Name, email address, and phone number — provided when you submit an enquiry form or contact us directly.
- Organisation Details: Company name, role, and industry — collected during initial project scoping conversations.
- Technical Data: IP address, browser type, device information, and pages visited — collected automatically via website analytics tools.
- Communication Records: Correspondence via email or other written channels in the context of a service engagement.
- Cookie Data: Preference and analytics data as described in our Cookie Policy.
Legal Bases for Processing
We process personal data under the following lawful bases: (a) your consent, where explicitly provided; (b) the performance of a contract or pre-contractual steps at your request; (c) our legitimate interests in operating and improving our services; and (d) compliance with applicable legal obligations under Thai law.
3. How We Use Your Data
Personal data collected by Synthara is used for the following purposes:
Service Communication
Responding to enquiries and coordinating service delivery with clients.
Website Improvement
Analysing site usage patterns to improve content structure and usability.
Contract Fulfilment
Managing project agreements, deliverables, and billing records.
Legal Compliance
Meeting obligations under Thai law, including PDPA and tax regulations.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4. Data Protection Measures
We apply reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or misuse:
- Data transmitted via our website is encrypted using TLS/HTTPS protocols.
- Access to personal data internally is restricted to team members with a direct need.
- Third-party services used for storage or analytics are selected based on their security standards.
- In the event of a data breach affecting your personal information, we will notify you and the relevant authority in accordance with PDPA requirements.
Data Retention
Contact enquiry records are retained for up to 24 months. Client engagement records are kept for up to 7 years for legal and accounting purposes. Analytics data is retained for up to 14 months. You may request earlier deletion — see Section 6.
5. Cookies & Tracking
Our website uses cookies to support basic functionality, understand how visitors interact with content, and remember your preferences. Cookie categories include essential, analytics, marketing, and preference cookies.
You can review and adjust your cookie preferences at any time by visiting our Cookie Policy page. Essential cookies cannot be disabled as they are required for the website to function.
6. Your Rights Under PDPA
Under Thailand's Personal Data Protection Act, you have the following rights with respect to your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete information.
Right to Erasure
Request deletion of your personal data where we no longer have a lawful basis to retain it.
Right to Object
Object to processing carried out on the basis of legitimate interests.
Right to Withdraw Consent
Withdraw previously given consent at any time without affecting prior processing.
Right to Data Portability
Receive your data in a structured, commonly used format where technically feasible.
To exercise any of these rights, contact us at [email protected]. We aim to respond within 30 days. If you believe your rights have not been respected, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.
7. Third-Party Links & Services
Our website may contain links to external sites or reference third-party tools used in service delivery. We are not responsible for the privacy practices of those external services. We encourage you to review their respective privacy policies.
Third-party analytics and tracking services (where consented) may independently collect technical data in accordance with their own privacy terms.
8. Children's Privacy
Synthara's services are intended for organisations and professionals. We do not knowingly collect personal data from individuals under the age of 20. If you believe we have inadvertently collected such data, please contact us promptly so that we may take appropriate steps.
9. International Data Transfers
Where data is processed or stored outside Thailand — for example, through cloud-based tools — we take steps to ensure that appropriate safeguards are in place in line with PDPA requirements. This may include data transfer agreements or use of services located in jurisdictions with recognised data protection standards.
10. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, the revised version will be published on this page with an updated date. If changes are material, we will take reasonable steps to inform affected individuals.
Continued use of our website after any update constitutes acceptance of the revised policy.
11. Contact for Data Enquiries
If you have any questions, concerns, or requests related to this policy or your personal data, please reach out: