Privacy Policy

1. Our Commitment to Privacy

Anchora takes the privacy of its clients and website visitors seriously. We collect only the personal data necessary to provide our services and communicate with people who contact us. We do not sell personal data to third parties, and we do not use it for advertising.

This policy is written in plain English and is intended to be understood by the people it concerns. If you have questions after reading it, please contact us at [email protected].

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: Name, email address, and phone number (when provided via our enquiry form or direct contact).
• Message content: The content of messages sent to us through our website form or by email.
• Service-related information: Information you share with us during sessions, including document details relevant to the service you have engaged.
• Website usage data: Technical data collected automatically, including IP address, browser type, pages visited, and session duration (via analytics cookies, if consented).

Legal Basis for Processing

• Contract performance: Processing necessary to deliver services you have engaged us for.
• Legitimate interests: Responding to enquiries and managing our business communications.
• Consent: For marketing emails and non-essential cookies, where you have expressly opted in.

Retention Periods

Contact and enquiry data is retained for up to 24 months from the date of last contact. Service records for active clients are retained for the duration of the engagement plus 12 months. Analytics data is retained for up to 14 months.

3. How We Use Personal Data

• To respond to enquiries submitted through our website or by phone or email.
• To schedule and deliver the services you have engaged.
• To maintain records of sessions and outputs provided to you.
• To send service-related communications (appointment reminders, session notes).
• To analyse website usage patterns in aggregate form (if analytics cookies are accepted).
• To comply with any applicable legal obligations.

We do not share your personal data with third parties for marketing purposes. We do not sell personal data.

4. How We Protect Your Data

• Our website is served over HTTPS with TLS encryption.
• Client data is stored on password-protected systems with restricted access.
• Access to personal data is limited to staff directly involved in service delivery.
• In the event of a data breach that is likely to affect your rights, we will notify you promptly and, where required by applicable law, report to the relevant authority.

5. Cookies

Our website uses cookies for basic functionality (essential) and, with your consent, for analytics purposes. We do not use advertising or tracking cookies. You can manage your cookie preferences at any time via our Cookie Policy page.

6. Your Rights

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable, other data protection frameworks, you have the following rights in relation to your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no longer a legitimate reason to retain it.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You may also raise a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand if you believe your rights have not been respected.

7. Links to Third-Party Sites

Our website may contain links to external sites, including official government portals referenced in our information materials. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal data.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have received data from a minor, please contact us and we will arrange for its deletion.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make a significant change affecting how we process your data, we will notify active clients by email in advance.

10. Contact for Privacy Matters