Privacy Policy

Introduction

Verdant Owl ("we," "our," or "us") is committed to protecting the privacy and security of personal information entrusted to us by clients, prospective clients, and website visitors. This Privacy Policy explains how we collect, use, protect, and handle personal data in connection with our business consulting services.

Our consulting practice is based in Bangkok, Thailand, and we comply with applicable Thai data protection regulations, including the Personal Data Protection Act B.E. 2562 (2019). For questions regarding this policy or our data practices, please contact us at [email protected].

Information We Collect

We collect personal information necessary to provide consulting services, respond to inquiries, and maintain professional relationships with clients.

Information You Provide Directly:

• Contact information including name, email address, phone number, and business address
• Company and role information relevant to consulting engagements
• Communication preferences and inquiry details submitted through our website or email
• Information shared during consultations, interviews, or engagement work

Information Collected Automatically:

• Website usage data including pages visited, time spent, and navigation patterns
• Technical information such as browser type, device information, and IP address
• Cookie data as detailed in our Cookie Policy

How We Use Your Information

We use collected information for the following purposes:

• Delivering consulting services and fulfilling engagement commitments
• Responding to inquiries and scheduling initial consultations
• Communicating about services, engagements, and relevant organizational topics
• Maintaining client records and engagement documentation
• Analyzing website usage to improve our digital presence
• Complying with legal obligations and professional standards

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contract fulfillment: Processing necessary to provide consulting services under engagement agreements
• Consent: Where you have provided explicit consent for specific processing activities
• Legitimate interests: For business operations, service improvement, and maintaining professional relationships
• Legal compliance: To meet regulatory requirements and professional obligations

Information Sharing and Disclosure

We maintain strict confidentiality regarding client information. We do not sell personal data to third parties. Limited sharing occurs only in the following circumstances:

• Service providers: Trusted vendors supporting our operations (email services, website hosting) under confidentiality agreements
• Professional advisors: Legal counsel or accountants when necessary for business operations
• Legal requirements: When disclosure is required by law or to protect legal rights
• Business transfers: In connection with mergers or acquisitions, subject to confidentiality protections

Client engagement information shared during consulting work is treated with professional confidentiality according to our engagement agreements.

Data Security

We implement appropriate technical and organizational measures to protect personal information:

• Secure data storage with encryption for sensitive information
• Access controls limiting information availability to authorized personnel
• Regular security assessments and updates to protective measures
• Confidentiality agreements with all team members and contractors
• Secure communication channels for client interactions

While we take reasonable precautions, no internet transmission or electronic storage method is completely secure. We cannot guarantee absolute security but commit to addressing any identified vulnerabilities promptly.

Data Retention

We retain personal information for different periods based on data type and purpose:

• Client engagement records: Maintained for seven years following engagement completion for professional standards compliance
• Inquiry information: Retained for two years or until you request deletion
• Website analytics data: Stored for 24 months in aggregated form
• Marketing communications: Kept until you unsubscribe or request removal

When retention periods expire, we securely delete or anonymize personal information unless longer retention is required by law.

Your Privacy Rights

Under Thai data protection law and professional standards, you have the following rights:

• Access: Request information about personal data we hold and how it's used
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal data, subject to legal and professional obligations
• Data portability: Receive your personal data in structured, commonly used format
• Objection: Object to processing based on legitimate interests
• Withdrawal of consent: Withdraw previously given consent at any time
• Complaint: Lodge a complaint with Thailand's Personal Data Protection Committee

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

Cookies and Website Analytics

Our website uses cookies and similar technologies to enhance user experience and analyze site usage. We use:

• Essential cookies: Required for basic website functionality
• Analytics cookies: Help us understand website usage patterns
• Preference cookies: Remember your settings and choices

For detailed information about cookie usage and management, please see our Cookie Policy.

Children's Privacy

Our services are directed to business professionals and organizations. We do not knowingly collect information from individuals under 18 years of age. If we become aware of such collection, we will promptly delete the information.

International Data Transfers

Our operations are primarily based in Thailand. If we transfer personal data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your information in accordance with Thai data protection standards.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through website notice or email to active clients. The "Last Updated" date indicates when revisions were made. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

We aim to respond to all privacy inquiries within 30 days.