This Privacy Policy explains how Bodhi Rein ("we", "us", or "our") collects, uses, stores, and protects personal information provided by visitors to our website and clients engaging our consulting services. We are committed to handling your information with discretion and in accordance with the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and other applicable laws.
1. Who We Are
Bodhi Rein is a strategic business consulting practice operating from 36 Sarasin Road, Lumpini, Bangkok 10330, Thailand. We provide advisory services in the areas of risk management, employer branding, and corporate venture development. For privacy-related inquiries, you may contact us at [email protected] or by telephone at +66 2 618 4273.
2. Information We Collect
Information you provide directly
When you submit an inquiry through our contact form, send us an email, or engage us as a client, we may collect:
- Your name and professional title
- Your organization's name and industry
- Your email address and telephone number
- The content of your inquiry or communication
- Any information you choose to share during a consultation or scoping conversation
Information collected automatically
When you visit our website, certain technical data is collected automatically through cookies and analytics tools, including:
- Your IP address and general geographic region
- Browser type, device type, and operating system
- Pages visited, time spent on each page, and navigation patterns
- Referring website or search query that led you to our site
This data is used in aggregated form to understand how visitors use our website and to improve our content and services. Please refer to our Cookie Policy for full details on the technologies used.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To respond to inquiries and provide information about our services
- To assess whether an engagement may be a suitable fit for your organization
- To deliver consulting services under a signed engagement agreement
- To communicate project updates, deliverables, and relevant follow-up
- To improve the quality and relevance of our website and communications
- To comply with legal, regulatory, and contractual obligations
We do not use your personal information for unsolicited marketing or share it with third parties for advertising purposes.
4. Legal Basis for Processing
We process personal information on the following legal bases under the PDPA:
- Consent — where you have provided explicit consent, such as accepting our cookie policy or submitting a contact form
- Contractual necessity — where processing is required to deliver services under an agreed engagement
- Legitimate interests — where we have a reasonable business purpose, such as improving our website or following up on a previous inquiry, and this does not override your rights
- Legal obligation — where we are required to process data to comply with applicable law
5. How We Share Your Information
We do not sell, rent, or trade personal information. We may share your information in limited circumstances:
- Service providers — trusted third-party vendors who assist with website hosting, email delivery, or analytics, subject to appropriate data processing agreements
- Professional advisors — legal, accounting, or insurance professionals when necessary for our business operations
- Legal requirements — where we are required to disclose information by law, court order, or regulatory authority
- Business transfers — in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections
6. Data Retention
We retain personal information for as long as necessary to fulfill the purpose for which it was collected, or as required by law. Specifically:
- Inquiry data from non-clients is retained for up to 12 months
- Client engagement records are retained for a minimum of 5 years following project completion, in line with Thai accounting and contractual requirements
- Website analytics data is typically retained for 26 months in aggregated form
When personal information is no longer needed, it is securely deleted or anonymized.
7. Your Rights
Under the Thailand PDPA, you have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion or anonymization of your personal information, where applicable
- Object to or restrict the processing of your personal information in certain circumstances
- Request a portable copy of data you have provided to us
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.
8. Data Security
We take reasonable technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. These include use of encrypted communication channels, access controls, and regular review of our information handling practices. While no system can be entirely without risk, we are committed to maintaining appropriate standards of data security.
9. International Transfers
Some of our service providers are located outside Thailand. Where personal information is transferred internationally, we ensure appropriate safeguards are in place, consistent with PDPA requirements and applicable cross-border data transfer standards.
10. Children's Privacy
Our website and services are directed at business professionals and organizations. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has submitted information to us, please contact us and we will take prompt action to delete it.
11. Links to Other Websites
Our website may contain links to third-party websites for reference or informational purposes. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page. If changes are material, we will take reasonable steps to notify you, such as through a notice on our website. We encourage you to review this page periodically.
13. Contact Us
If you have questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how your information has been handled, please reach out to us:
Data Controller
Bodhi Rein