Legal

Privacy Policy

Last Updated: 14 April 2025  ·  Halcyon Bureau Co., Ltd.

Halcyon Bureau values the privacy of every individual who interacts with our website or engages our services. This policy describes how we collect, use, protect, and store personal data. It applies to visitors to our website at halcyonbad.pro and to clients engaged with us in an advisory capacity.

By using our website or enquiring about our services, you acknowledge that you have read and understood this policy. If you have questions, write to us at [email protected].

1. Data Controller

The data controller responsible for your personal information is:

Halcyon Bureau Co., Ltd.
36 Soi Thonglor 10, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand
Email: [email protected]
Telephone: +66 2 714 9382

2. Personal Data We Collect

We collect personal data through the following means:

• Enquiry form: When you submit an enquiry through our website, we collect your name, email address, telephone number (if provided), and the content of your message.
• Direct communication: If you contact us by email or telephone, we retain the details you provide for the purposes of responding to and fulfilling your request.
• Website analytics: We may collect anonymised data about how visitors use our website, including pages visited, time on site, and general geographic location. This data does not identify individuals.
• Cookies: We use cookies to maintain basic website functionality and, where consent is given, to assist with analytics. See our Cookie Policy for details.

Legal Basis for Processing

We process personal data on the following legal bases under Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

• Consent: Where you have explicitly consented, for example by submitting an enquiry form or accepting cookies.
• Contractual necessity: To communicate with you and fulfil an engagement you have requested.
• Legitimate interest: For the purposes of responding to unsolicited enquiries and maintaining minimal website analytics.

Data Retention

Enquiry data is retained for up to 24 months from the date of the last interaction unless an engagement is entered into, in which case records are retained for the duration of the engagement plus three years. Analytics data is retained for no more than 14 months. You may request deletion at any time.

3. How We Use Your Data

• To respond to your enquiry and discuss whether our services are appropriate for your situation
• To conduct and deliver an advisory engagement if one is agreed
• To send correspondence relevant to an active engagement
• To maintain basic records as required for accounting and legal purposes
• To improve the performance and usability of our website using aggregate analytics data

We do not use your personal data for marketing communications without your explicit consent, and we do not send unsolicited promotional messages.

Data Sharing

We do not sell personal data to third parties. We may share limited data with:

• Service providers: Trusted third parties who support the operation of our website (e.g., hosting providers, analytics platforms), under contractual data processing agreements.
• Legal and regulatory authorities: Where required by law or in response to valid legal process.

Engagement-specific materials, client communications, and documents are never shared with any third party except where explicitly authorised by the client.

4. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or misuse. These include:

• Encrypted transmission of data via HTTPS
• Access controls limiting who within the bureau can access client data
• Secure storage of working documents and correspondence
• Destruction of engagement working materials upon conclusion of the engagement

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, you directly, within the timeframes prescribed by applicable law.

5. Cookies

Our website uses cookies for basic functionality and, where consent is given, for analytics purposes. Essential cookies are necessary for the site to operate and cannot be disabled. Optional cookies may be accepted or rejected via our cookie consent tool. For a full description of the cookies we use, please see our Cookie Policy.

6. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: You may request deletion of your data, subject to our legal retention obligations.
• Right to data portability: You may request your data in a structured, machine-readable format where technically feasible.
• Right to object: You may object to processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You may lodge a complaint with the Personal Data Protection Committee of Thailand (PDPC) if you believe your data has been handled unlawfully.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

8. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently received data from a minor, please contact us so we can take appropriate action.

9. Changes to This Policy

We may update this privacy policy from time to time. The current version will always be available on this page, with the "Last Updated" date shown at the top. Continued use of our website or services following an update constitutes acceptance of the revised policy. For material changes, we will endeavour to provide notice via our website.

10. Contact

For any questions or requests relating to this privacy policy or your personal data, please contact:

Halcyon Bureau
36 Soi Thonglor 10, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand
Email: [email protected]
Telephone: +66 2 714 9382