Privacy Policy

1. Data Controller

The data controller for personal information processed under this policy is:

Goldhaven
261 Thanon Sathon Tai, Yan Nawa, Sathon, Bangkok 10120, Thailand
Phone: +66 90 627 4185
Email: [email protected]

2. Personal Data We Collect

We collect the minimum data necessary to respond to enquiries and deliver our services:

• Contact details: Name, email address, and phone number — provided voluntarily when you use our enquiry form or contact us directly.
• Service-related documents: Physical documents you provide to us solely for the purpose of the Records Digitisation service. These are handled, scanned, and returned in full; no copies are retained.
• Website usage data: Anonymised analytics data collected via cookies, including pages visited, browser type, and approximate location. See Section 6 for details.

Legal basis for processing

• Consent — for analytics and marketing cookies, and for optional marketing communications.
• Legitimate interest — for responding to an enquiry you have sent us.
• Contract performance — for processing your booking or service engagement.

Retention periods

• Enquiry contact data: 12 months from the date of last contact, unless a service engagement begins.
• Service records (name, email, booking details): 3 years from the service completion date for accounting purposes.
• Documents submitted for digitisation: returned in full at handover; no copies retained by Goldhaven.

3. How We Use Your Data

• To respond to your enquiry or question via email or phone.
• To confirm your registration for a workshop or receipt of a toolkit order.
• To carry out the Records Digitisation service you have commissioned.
• To send occasional service updates or news about future sessions, only where you have opted in.
• To understand how our website is used in aggregate so we can improve it.

Data sharing

We do not sell personal data. We do not share personal data with third parties for their own marketing purposes. We may share data with service providers who assist us in running this website (such as hosting and analytics providers), subject to contractual data protection obligations. We may disclose data where required by Thai law or a valid legal order.

4. How We Protect Your Data

• Our website uses TLS encryption (HTTPS) for all data in transit.
• Access to personal data is restricted to Goldhaven staff who need it to perform their role.
• Physical documents handed to us for digitisation are kept in a locked secure area during processing and returned at the agreed handover date.
• In the event of a personal data breach that is likely to affect your rights, we will notify you and the relevant authority without undue delay.

5. Cookies

We use essential cookies to keep this website functioning correctly, and optional analytics cookies (only if you consent) to understand how visitors use the site in aggregate. We do not use advertising or tracking cookies.

For full details and to manage your cookie preferences, please see our Cookie Policy.

6. Your Rights

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable data protection principles, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data where there is no legitimate reason for us to continue holding it.
• Data portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interest.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
• Lodge a complaint: You may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have not been respected.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external websites for your convenience. We are not responsible for the privacy practices of those sites and recommend you review their policies separately.

8. Children's Privacy

Our services are intended for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently done so, please contact us and we will delete the data promptly.

9. Changes to This Policy

We may update this policy from time to time. We will post the revised version on this page with an updated "Last Updated" date. Where changes are material, we will notify you by email if we hold your contact details. Continued use of our services after the effective date constitutes acceptance of the updated policy.