Privacy Policy

1. Introduction

Globex Consulting ("we", "us", "our") is a business formation advisory practice registered and operating in Bangkok, Thailand. This Privacy Policy describes how we collect, use, store, and protect personal data obtained through our website at globexpanconsulting.com and in the course of our professional engagements.

Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA) came into full force on 1 June 2022 and governs the processing of personal data in Thailand. This policy has been prepared in accordance with those requirements.

Questions about this policy may be directed to: [email protected]

2. Personal Data We Collect

We collect personal data in the following circumstances:

2.1 Website enquiry forms

When you submit an enquiry through our website, we collect your name, email address, and any telephone number and message text you choose to provide.

2.2 Engagement documentation

In the course of a formation engagement, we may collect identification documents (passport copies, national ID), address information, nationality details, tax identification numbers, and information about business activities and intended structures. This collection is necessary for the performance of our services.

2.3 Website analytics

Our website may use analytics tools that collect anonymised information about website usage, including pages viewed, session duration, and referring sources. This data does not identify you individually.

2.4 Legal basis for processing

• Enquiry handling: your consent (submitted via the form)
• Engagement data: performance of a contract / legitimate interest
• Analytics: legitimate interest in understanding website usage

3. How We Use Your Data

We use the personal data we hold for the following purposes:

• To respond to enquiries about our services
• To prepare and deliver formation engagement work
• To submit formation documents to the Department of Business Development on your behalf
• To correspond with government authorities, overseas counsel, and other third parties involved in an engagement where you have authorised us to do so
• To comply with legal and regulatory obligations applicable to our practice
• To improve our website and service delivery

We do not sell personal data to third parties. We do not use your data for unsolicited marketing without your consent.

4. Data Retention

Retention periods vary by data type:

• Enquiry data (no engagement follows): deleted within 90 days of last contact
• Engagement files: retained for seven years from engagement completion, in accordance with Thai commercial record-keeping requirements
• Website analytics data: retained in aggregated, anonymised form for up to 24 months

5. How We Protect Your Data

We take reasonable and appropriate technical and organisational measures to protect the personal data we hold, including:

• Encrypted storage for client identification documents and engagement files
• Access controls limiting file access to the assigned working adviser
• Secure email communication for transmission of sensitive documents
• Regular review of data held to remove records no longer required

In the event of a data breach that is likely to result in risk to your rights or freedoms, we will notify you and, where required, the Office of the Personal Data Protection Committee (PDPC) of Thailand, within the timeframes required by the PDPA.

6. Cookies

Our website uses cookies to operate correctly and to understand how it is used. Cookie categories include essential cookies (required for site function) and optional analytics and preference cookies. Full information is provided in our Cookie Policy. You can manage your preferences at any time through that page.

7. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights regarding personal data we hold about you:

• Right of access: request confirmation of whether we hold your data and obtain a copy
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data where there is no lawful basis for continued retention
• Right to restriction: request limited processing in certain circumstances
• Right to data portability: receive data in a structured, machine-readable format where applicable
• Right to object: object to processing based on legitimate interest
• Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Personal Data Protection Committee of Thailand.

8. Third-Party Links

Our website may contain links to external sites, including government portals and reference resources. We are not responsible for the privacy practices of those sites. We recommend you review the privacy policies of any third-party site you visit.

9. Children's Privacy

Our services are directed at individuals aged 18 and over. We do not knowingly collect personal data from persons under 18. If we become aware that we have inadvertently collected data from a minor, we will delete it without undue delay.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised policy will be published on this page with an updated date. Continued use of our website after the publication of a revised policy constitutes acceptance of the updated terms.