Privacy Policy

1. Introduction

Vonhex Co., Ltd. ("Vonhex", "we", "us", or "our") is committed to protecting the personal data of individuals who visit our website and engage with our consulting services. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA).

This policy applies to personal data collected through our website at vonhexenes.live, through direct communications, and during consulting engagements. By using our website or engaging our services, you acknowledge the practices described here.

Questions regarding this policy may be directed to: [email protected]

2. Data Controller

The data controller responsible for your personal information is Vonhex Co., Ltd., 142/3 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand.

3. What Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, telephone number
• Professional information: job title, organization name
• Communication records: messages sent through our contact form or by email
• Engagement data: information shared during the course of a consulting engagement (subject to separate confidentiality agreement)
• Website usage data: IP address, browser type, pages visited, referral source (collected via cookies — see our Cookie Policy)

We collect only what is necessary for the stated purposes of each interaction.

4. How We Collect Personal Data

Personal data is collected through the following means:

• Contact form submissions on our website
• Direct email and telephone communications
• In-person meetings and consultations
• Documents and information shared during consulting engagements
• Website cookies and analytics tools (with consent)

5. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA:

• Consent: for marketing communications and non-essential cookies, where you have given explicit consent
• Contract performance: for processing necessary to deliver consulting services you have engaged us to provide
• Legitimate interests: for website analytics, improving our services, and responding to enquiries from prospective clients
• Legal obligation: where processing is required to comply with applicable Thai law

6. How We Use Personal Data

Personal data collected is used for the following purposes:

• Responding to enquiries and communications
• Delivering and managing consulting engagements
• Sending service-related communications (confirmation, scheduling, delivery)
• Improving our website and services through aggregated analytics
• Fulfilling legal and contractual obligations
• Sending relevant updates or information (only with consent; unsubscribe option available at all times)

We do not sell personal data to third parties. We do not use personal data for automated decision-making that produces legal or similarly significant effects.

7. Data Retention

Personal data is retained for the following periods:

• Contact enquiries: 24 months from the date of last contact
• Client engagement records: 5 years from the conclusion of the engagement
• Financial records: 7 years in accordance with Thai accounting regulations
• Website analytics data: 26 months from collection

After the applicable retention period, data is securely deleted or anonymized.

8. Data Sharing

We do not share personal data with third parties except in the following limited circumstances:

• Service providers acting as data processors on our behalf (e.g., website hosting, email delivery), who are bound by data processing agreements
• Professional advisors (legal, accounting) where necessary
• Regulatory or law enforcement authorities where required by applicable law

We do not transfer personal data outside of Thailand without appropriate safeguards as required by the PDPA.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure. These measures include:

• Encrypted storage and transmission of data
• Access controls limiting data access to authorized personnel
• Regular review of security practices and procedures
• Confidentiality obligations for all staff and contractors

In the event of a personal data breach that poses risk to affected individuals, we will notify the relevant supervisory authority and affected data subjects in accordance with PDPA requirements.

10. Cookies

Our website uses cookies and similar technologies. For detailed information on which cookies we use, their purpose, and how to manage your preferences, please refer to our Cookie Policy.

11. Your Rights Under the PDPA

As a data subject under Thailand's PDPA, you have the following rights:

• Right to access: request confirmation of whether we hold your personal data and obtain a copy
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure: request deletion of your personal data in certain circumstances
• Right to data portability: receive your personal data in a structured, commonly used format
• Right to object: object to processing based on legitimate interests
• Right to restriction: request restriction of processing in certain circumstances
• Right to withdraw consent: withdraw consent at any time where processing is based on consent (without affecting the lawfulness of prior processing)

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Office of the Personal Data Protection Committee (PDPC) if you believe your rights have not been respected.

12. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

13. Children's Privacy

Our services are intended for adults (18 years and older). We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data through our website, please contact us promptly so we can remove it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Material changes will be communicated through a notice on our website. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

15. Contact

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

• Email: [email protected]
• Phone: +66 2 247 5893
• Address: 142/3 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand