Privacy Policy
Last updated: 7 April 2025 · Atherly Co., Ltd.
Atherly Co., Ltd. ("Atherly", "we", "us", "our") is committed to protecting the personal data of the people we work with. This policy explains what data we collect, how we use it, and what rights you have under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and other applicable regulations.
This policy applies to all individuals who interact with our website, enquire about our programmes, or engage with us as participants or sponsors.
1. Data we collect
We collect personal data in two main ways: information you provide to us directly, and information collected automatically through our website.
1.1 Information you provide
- Full name and professional title
- Email address and telephone number
- Organisation name and role
- The content of messages submitted through our contact form
- Any information shared during intake or initial conversations
1.2 Information collected automatically
- IP address and browser type
- Pages visited and time on site
- Referring URL and device information
- Cookie data (see our Cookie Policy)
2. How we use your data
We use personal data for the following purposes, each with a stated legal basis under the PDPA:
| Purpose | Legal basis |
|---|---|
| Responding to enquiries about our programmes | Legitimate interest / pre-contractual steps |
| Delivering programme and advisory services | Contract performance |
| Sending programme updates or relevant information | Consent (where required) |
| Improving website functionality and content | Legitimate interest |
| Complying with legal and regulatory obligations | Legal obligation |
We do not use personal data for advertising profiling, automated decision-making, or any purpose incompatible with the above.
3. Data retention
- Enquiry data: retained for up to 24 months from last contact, then deleted.
- Programme engagement data: retained for 5 years after programme completion for accounting and record purposes.
- Website analytics data: retained for up to 26 months.
- Consent records: retained for as long as legally required.
4. Data sharing
We do not sell personal data. We share data only in the following circumstances:
- Service providers: Third parties who assist with website hosting, email delivery, and analytics, operating under data processing agreements.
- Legal requirements: Where disclosure is required by Thai law, court order, or regulatory authority.
- With your consent: Where you have explicitly agreed to sharing with a named party.
What participants discuss in advisory sessions is not shared with programme sponsors or any other party, beyond the written reading agreed with participants at programme close.
5. Data protection
- Data in transit is encrypted using TLS/SSL.
- Access to personal data is limited to staff who require it for their role.
- We review our data handling practices annually.
- In the event of a data breach affecting your rights, we will notify you and the relevant authority within the timeframes required by the PDPA.
6. Cookies
Our website uses cookies for essential functionality and, with your consent, for analytics. For full details, including how to manage your preferences, see our Cookie Policy.
7. Your rights under the PDPA
Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:
- Right to access: Request a copy of the personal data we hold about you.
- Right to rectification: Ask us to correct inaccurate or incomplete data.
- Right to erasure: Request deletion of your data where no legal basis for retention remains.
- Right to restriction: Ask us to limit how we process your data in certain circumstances.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interest.
- Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting earlier processing.
- Right to lodge a complaint: File a complaint with Thailand's Personal Data Protection Committee if you believe your rights have been infringed.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Third-party links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing personal data.
9. Children's privacy
Our services are intended for professionals aged 18 and above. We do not knowingly collect data from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly.
10. Changes to this policy
We may update this policy from time to time. Where changes are material, we will notify you by email or a prominent notice on our website. Continued use of our website after changes constitutes acceptance of the revised policy.
11. Contact
For any questions about this policy or to exercise your rights:
Atherly Co., Ltd.
152 Sukhumvit 49 Road, Khwaeng Khlong Tan Nuea, Khet Watthana, Bangkok 10110, Thailand
Email: [email protected]
Telephone: +66 2 824 5793