Legal

Privacy Policy

Last updated: 14 May 2025

Provenance ("we", "us", "our") respects the privacy of the people who contact us and use our services. This policy explains what personal data we collect, how we use it, and what rights you have in relation to it. It applies to users of this website and to clients who engage us for our document organisation, succession education, and archiving services.

We operate in Thailand and process personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) (PDPA). For data subjects located in the European Union, we also seek to comply with the General Data Protection Regulation (GDPR) to the extent applicable.

If you have questions, contact us at [email protected].

1. What Data We Collect

We collect personal data in the following circumstances:

Contact form submissions: name, email address, telephone number (optional), and the content of your message.
Service enquiries and bookings: name, contact details, and information you share about your family situation relevant to the service you are enquiring about.
Session records: notes taken during document organisation sessions (with your knowledge and consent).
Website analytics: anonymised usage data (pages viewed, session duration) collected via analytics cookies if you have consented.
Cookies: data stored in your browser as described in our Cookie Policy.

We do not collect copies of your documents. Original documents remain in your possession at all times.

2. How We Use Your Data

To respond to your enquiry or booking request.
To deliver the service you have booked and to maintain session records relevant to that service.
To send follow-up communications related to your engagement with us.
To understand how our website is used (analytics cookies, with consent).
To comply with legal obligations under Thai law.

We do not use your personal data for any marketing purpose unless you have explicitly consented. We do not sell or share your data with third parties for their own marketing purposes.

3. Legal Basis for Processing

Consent: for analytics cookies and for any optional communications.
Contractual necessity: for data required to deliver a booked service.
Legitimate interest: for responding to general enquiries and maintaining reasonable business records.
Legal obligation: where Thai law requires us to retain certain records.

4. Data Retention

We retain contact and session records for three years from the date of last contact, unless a longer period is required by applicable law. Analytics data is retained in anonymised form and does not include identifiable personal data. You may request earlier deletion — see Section 7.

5. Data Security

We store personal data on password-protected systems and do not transmit it over unencrypted channels where it can be avoided. Access to client records is restricted to Provenance staff who need them to deliver the service. In the event of a data breach that poses a risk to affected individuals, we will notify relevant parties in accordance with PDPA obligations.

6. Cookies

This website uses cookies. Essential cookies are required for basic site function. Analytics and preference cookies are optional and only set with your consent. See our full Cookie Policy for details and to manage your preferences.

7. Your Rights

Under the PDPA and, where applicable, the GDPR, you have the following rights regarding your personal data:

Access: to request a copy of the personal data we hold about you.
Rectification: to request correction of inaccurate data.
Erasure: to request deletion of your data, subject to any legal retention requirements.
Restriction: to request that we limit how we use your data while a dispute is resolved.
Portability: to receive your data in a portable format where technically feasible.
Objection: to object to processing based on legitimate interest.
Withdrawal of consent: to withdraw any previously given consent at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend reading their privacy policies before providing any personal data.

9. Children's Privacy

Our services are directed at adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided personal data to us, please contact us and we will delete it promptly.

10. Policy Updates

We may update this policy from time to time. The current version is always available on this page, with the date it was last revised noted at the top. Continued use of the website following any update constitutes acceptance of the revised policy.

11. Contact & Supervisory Authority

Data controller: Provenance, 64 Pattaya Beach Road, Bang Lamung, Chon Buri 20150, Thailand.

Email: [email protected]

If you are not satisfied with our response to a privacy concern, you may contact the Personal Data Protection Committee of Thailand (PDPC) or, for EU residents, your national supervisory authority.