Privacy Policy

1. Introduction

Wren Lattice ("we," "our," or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our consulting services.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you have any questions or concerns about this Privacy Policy, please contact us at [email protected].

2. Information We Collect

Personal Information

We collect personal information that you voluntarily provide to us when you:

• Submit an inquiry through our contact form
• Engage our consulting services
• Subscribe to our communications
• Participate in surveys or feedback requests

The personal information we collect may include your name, email address, phone number, company name, job title, and any other information you choose to provide.

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device. We collect this information using technologies such as cookies and web analytics services.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide customer support
• To deliver consulting services as agreed in our service contracts
• To send you administrative information, such as updates to our terms or policies
• To analyze and improve our website and services
• To comply with legal obligations and protect our legal rights
• To send marketing communications (only with your consent)

4. Legal Basis for Processing

Under Thailand's Personal Data Protection Act (PDPA), we process your personal data on the following legal bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for the performance of a contract with you
• Legal Obligation: Processing is necessary for compliance with legal obligations
• Legitimate Interests: Processing is necessary for our legitimate interests, provided these do not override your rights

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

• Service Providers: We may share your information with third-party service providers who perform services on our behalf, such as website hosting, data analysis, and email delivery
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities
• Protection of Rights: We may disclose information to protect our rights, privacy, safety, or property, and that of our clients or others

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Secure storage systems with access controls
• Regular security assessments and updates
• Employee training on data protection practices
• Confidentiality agreements with all team members

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot provide an absolute guarantee of security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Contact inquiries: Retained for up to 2 years unless you become a client
• Client information: Retained for the duration of the engagement plus 5 years for legal and professional standards compliance
• Marketing communications: Retained until you unsubscribe or withdraw consent
• Website analytics: Aggregated data retained indefinitely; individual data retained for 26 months

8. Your Rights

Under Thailand's PDPA and applicable data protection laws, you have the following rights:

• Right to Access: You can request copies of your personal data
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data under certain circumstances
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request transfer of your data to another service provider
• Right to Object: You can object to processing of your personal data for certain purposes
• Right to Withdraw Consent: You can withdraw consent at any time where we rely on consent as the legal basis

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.

For more information about how we use cookies, please see our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us so we can take appropriate action.

12. International Data Transfers

Your information may be transferred to and maintained on computers located outside of Thailand where data protection laws may differ. By using our services, you consent to the transfer of your information to Thailand and any other country where we operate. We will take appropriate measures to ensure your data is treated securely and in accordance with this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our services after any modifications indicates your acceptance of the updated policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Thailand, including the Personal Data Protection Act B.E. 2562 (2019). Any disputes relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Thailand.