Privacy Policy

1. Data We Collect

We collect only the data needed to respond to enquiries and arrange sessions. Specifically:

• Contact details: your name, email address, and telephone number when you submit an enquiry form or contact us directly.
• Session notes: brief notes taken during sorting sessions, relating to document categories discussed — not the content of any document itself.
• Technical data: basic website analytics such as pages visited and approximate location region, collected via cookies when consent is given.
• Communications: records of email or telephone exchanges with our team for the purpose of scheduling and follow-up.

We do not collect copies of pension documents, financial records, or sensitive personal information as part of our services. We do not process special category data as defined under the PDPA.

2. How Data Is Collected

• Enquiry form on our website — name, email, phone, and optional message.
• Direct contact by telephone or email.
• Session attendance — session notes created by our team during a session.
• Cookies — with your consent, analytics cookies track usage patterns on this website. See our Cookie Policy for full details.

Legal bases for processing (PDPA):

• Consent — for marketing communications and analytics cookies (Art. 19).
• Contractual necessity — to arrange and deliver sessions you have booked (Art. 24(3)).
• Legitimate interests — to maintain records of completed sessions and respond to follow-up queries (Art. 24(5)).

Retention periods: Contact enquiry data is retained for 12 months. Session records are retained for 36 months. If you do not proceed beyond an initial enquiry, your contact details are deleted after 3 months.

3. How We Use Your Data

• Responding to your enquiry and arranging session appointments.
• Delivering the service you have engaged us for and following up afterwards.
• Sending session reminders or confirmations by email or telephone.
• Improving our website and service quality using anonymised analytics.
• Complying with legal obligations under Thai law.

We do not use your data for automated decision-making or profiling. We do not sell your data to third parties. We do not send marketing communications without your explicit consent, and you may withdraw consent at any time by contacting [email protected].

Data sharing: We may share data with third-party service providers who support our operations (e.g. email hosting, website analytics) under data processing agreements. These providers are not permitted to use your data for their own purposes.

4. Data Protection Measures

• Contact data is stored in password-protected systems accessible only to authorised Everkeep team members.
• Our website uses HTTPS encryption for all data in transit.
• Physical session notes are stored in a locked filing cabinet at our Khon Kaen office.
• We review our data handling practices annually.
• In the event of a data breach that is likely to affect your rights, we will notify you and the relevant supervisory authority within the timeframe required by the PDPA.

5. Cookies

Our website uses cookies to ensure basic functionality and, with your consent, to understand how visitors use the site. Cookie categories we use include:

• Essential cookies: necessary for the website to work (e.g. remembering your cookie preference). Always active.
• Analytics cookies: help us understand page visits and improve content. Active only with consent.
• Preference cookies: remember settings to improve your experience. Active only with consent.

Full details are in our Cookie Policy. You can manage your preferences at any time through the cookie settings on our website.

6. Your Rights Under Thai PDPA

Under Thailand's Personal Data Protection Act, you have the following rights regarding personal data we hold about you:

• Right to access: request a copy of the personal data we hold about you.
• Right to rectification: ask us to correct inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data where we no longer have a lawful basis to hold it.
• Right to data portability: receive your data in a structured, commonly used format where technically feasible.
• Right to object: object to processing carried out on the basis of legitimate interests.
• Right to withdraw consent: withdraw any consent you have given at any time, without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint: if you believe we have not handled your data properly, you may contact the Office of the Personal Data Protection Committee (PDPC) in Thailand.

To exercise any of these rights, write to us at [email protected] or by post to our address below. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external sites — for example, links to publicly available resources about retirement documentation. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any site you visit via an external link.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that data from a minor has been submitted, we will delete it promptly. If you believe a minor has submitted data to us, please contact [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. We will not reduce your rights under this policy without making a clear effort to notify you. We encourage you to review this page periodically.

Continued use of our website or services after a policy update constitutes your acknowledgement of the revised policy.

10. Contact — Data Controller

Everkeep
320 Sri Chan Road, Nai Mueang
Mueang Khon Kaen, Khon Kaen 40000, Thailand
Telephone: +66 2 384 6927
Email: [email protected]

For complaints to the national supervisory authority: Office of the Personal Data Protection Committee (PDPC), Ministry of Digital Economy and Society, Thailand.