Privacy Policy | Bondwell

1. Introduction

Bondwell ("we", "us", "our") is committed to handling personal data responsibly and transparently. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the rights you have in relation to it. It applies to all individuals who visit our website or use our services.

Our business is based at 40 Mittraphap Road, Nai Muang, Khon Kaen 40000, Thailand. Questions about this policy may be directed to [email protected].

2. Data We Collect

We collect only the information needed to provide our services and respond to enquiries.

Contact information: name, email address, and phone number when submitted through our enquiry form.
Message content: any text you include in the message field of our contact form.
Session preparation information: document category lists or household descriptions shared ahead of a Document Bridge Session, where volunteered by the participant.
Technical data: IP address, browser type, and pages visited, collected automatically via cookies and server logs.

We do not collect sensitive personal data (such as financial records, health information, or identity documents) as part of our service delivery. Any documents shown during a Document Bridge Session remain with the participant — we do not copy, scan, or retain them.

3. Legal Basis for Processing

We process personal data on the following legal bases:

Consent: when you submit a contact form or agree to cookies, you consent to the associated processing.
Legitimate interest: to improve our website and understand how visitors use it, and to respond to communications from prospective or current clients.
Contract performance: to deliver booked sessions and advisory services.

Thailand's Personal Data Protection Act B.E. 2562 (PDPA) governs our data handling obligations as a business operating in Thailand.

4. How We Use Your Data

To respond to enquiries and answer questions before a booking.
To confirm, prepare for, and deliver booked sessions or advisory engagements.
To send occasional follow-up communications related to your session (not marketing without consent).
To improve our website content and user experience through analytics.
To comply with applicable legal obligations.

We do not sell personal data. We do not use personal data for automated decision-making or profiling.

5. Data Sharing

We do not share personal data with third parties except in the following circumstances:

Service providers: email hosting and website infrastructure providers who process data on our behalf under appropriate agreements.
Analytics services: where cookies are accepted, anonymised usage data may be shared with analytics providers.
Legal requirements: where disclosure is required by Thai law or a valid legal process.

6. Data Retention

We retain contact form data for up to 24 months from the date of submission. Session preparation notes are deleted within 30 days of the session unless retention is requested in writing. Website analytics data is retained for up to 26 months. If you ask us to delete your data, we will do so within 30 days subject to any legal retention obligations.

7. Cookies

Our website uses cookies to enable core functionality and, where consented, to collect usage analytics. You can manage cookie preferences at any time via our Cookie Policy page or through your browser settings. Withdrawing cookie consent does not affect the lawfulness of processing that occurred before withdrawal.

8. Data Security

We store personal data on servers with access controls and encryption at rest. Communication to and from our website uses TLS encryption. Access to personal data is restricted to team members who need it for service delivery. We review our data security practices regularly. In the event of a data breach that poses a risk to individuals, we will notify affected parties and relevant authorities in accordance with the PDPA.

9. Your Rights Under the PDPA

Under Thailand's PDPA, you have the following rights:

Right of access: to request a copy of personal data we hold about you.
Right to rectification: to request correction of inaccurate data.
Right to erasure: to request deletion of your data, subject to legal retention requirements.
Right to data portability: to receive your data in a structured, commonly used format.
Right to object: to object to processing based on legitimate interests.
Right to withdraw consent: to withdraw consent for processing at any time without affecting prior processing.
Right to lodge a complaint: with the Office of the Personal Data Protection Committee (PDPC) in Thailand.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. External Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before sharing personal information.

11. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have done so, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting a revised version on this page with an updated date. Continued use of our website or services after a change constitutes acceptance of the revised policy.

13. Contact

For any questions about this policy or about how we handle your personal data:

Email: [email protected]
Post: Bondwell, 40 Mittraphap Road, Nai Muang, Khon Kaen 40000, Thailand