Privacy Policy

01

Who We Are

Trusora is the data controller for personal data collected through this website and through our service engagements. Our registered address is 143 Sukhumvit Road, Khlong Toei, Bangkok 10110, Thailand. For privacy-related enquiries, contact us at [email protected].

02

Data We Collect

We collect only the personal data necessary to respond to enquiries and deliver our services:

• Contact information: name, email address, and phone number (optional) submitted through our enquiry form.
• Service correspondence: messages exchanged during an engagement, for the purpose of delivering the service.
• Usage data: standard website analytics (pages visited, approximate location, browser type) collected via cookies where consent is given.

We do not collect sensitive personal data, financial account details, or copies of personal legal documents. Family records organised during sessions belong to the client; Trusora does not retain them.

03

Legal Basis for Processing

• Consent: for optional cookies and marketing communications, where you have actively opted in.
• Contract performance: to deliver services you have engaged us to provide.
• Legitimate interest: to respond to your enquiries and maintain the security of our systems.
• Legal obligation: where we are required to retain certain records under applicable Thai law.

04

How We Use Your Data

• To respond to your enquiries and schedule initial conversations.
• To deliver and manage the service engagement you have requested.
• To send service-related communications (appointment confirmations, follow-up notes).
• To improve our website and services, using anonymised analytics data where consent has been given.

We do not sell personal data to third parties. We do not use your data for automated decision-making or profiling.

05

Data Retention

Contact and correspondence data is retained for a period of 24 months following the close of an engagement, after which it is securely deleted. Where no service engagement results from an enquiry, contact data is deleted within 90 days. Analytics data is retained in anonymised aggregate form.

06

Third-Party Services

We use the following third-party services, each of which operates under its own privacy policy:

• Google Analytics (optional, consent-based): website usage analytics.
• Video call platforms (for online sessions): used only for booked sessions; recordings are not retained without explicit agreement.

Our website contains links to external resources. We are not responsible for the privacy practices of third-party websites.

07

Cookies

Our website uses essential cookies for basic functionality, and optional analytics and preference cookies where you have consented. You can manage your cookie preferences at any time via our Cookie Policy page. Withdrawing consent does not affect the lawfulness of processing prior to withdrawal.

08

Your Rights Under the PDPA

As a data subject under Thailand's PDPA, you have the following rights:

• Right to access: request a copy of personal data we hold about you.
• Right to rectification: ask us to correct inaccurate or incomplete data.
• Right to erasure: request deletion of your data where it is no longer necessary for the purpose collected.
• Right to data portability: receive your data in a structured, commonly used format.
• Right to object: object to processing based on legitimate interest.
• Right to withdraw consent: withdraw consent at any time where processing is based on consent.
• Right to lodge a complaint: with the Office of the Personal Data Protection Committee (PDPC) of Thailand.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

09

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Access to contact data is restricted to Trusora staff involved in delivering or managing the relevant engagement. In the event of a data breach that poses a risk to individuals, we will notify the relevant supervisory authority as required under the PDPA.

10

Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that a minor's data has been submitted without appropriate parental consent, we will delete it promptly.

11

Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated "Last Updated" date. For material changes, we will notify active clients by email. Continued use of our website after a change constitutes acceptance of the updated policy.

12

Contact Us

For any questions about this Privacy Policy or your personal data: