We value your privacy and are determined to uphold your rights under Personal Data Protection Act B.E. 2562 (2019) (“PDPA“). We have accordingly prepared this privacy notice to outline what personal data we collect, from where we collect your personal data, how we use your personal data, who we disclose your personal data to, how we retain your personal data, and your rights under the PDPA.

What Personal Data Do We Collect?

For the purposes of providing services to you we may be required to collect personal data, including the following:

• First name
• Last name
• Address
• Telephone/ Mobile number
• Financial details (such as bank account number etc.)
• Other information contained in identification documents (such as National Identification cards and passports) and documents concerning juristic persons as issued by the competent state authorities

Where We Obtain Your Personal Data?

We will only gather your personal data from information or documents you have provided us, and in the event we obtain your personal data from 3rd party sources, we will seek your consent prior to collecting or processing your personal data.

How We Use Your Personal Data

We will limit the use of your personal data to the utmost necessary for the purposes of carrying out the services contemplated between us. In doing so we may rely on one or more of the following legal bases:

• Contractual basis We will collect and process your personal data for the purposes of the contract between us or for the purposes of entering into a contract between us.
• Legal duty We may be required to process your personal information when legal obligation compels us to do so.
• Legitimate Interest We may process your personal data when it is in our legitimate interest to do so in accordance with the applicable data protection laws provided your rights and freedom do not override our interests.
• Consent Where none of the foregoing legal bases apply, we may rely on your consent obtained in accordance with the PDPA and the applicable data protection laws to collect and process your personal data.

In any case, we will use your personal information strictly for the following purposes:

• To prepare documents, including contracts/ agreements to be entered into between us
• To provide services contemplated under the agreement/ contract between us
• To arrange for payments to be made or received with respect to the services contemplated in our contract/agreement
• To contact and reach out to you in relation to our services which you have requested from us
• For any other purposes for which we have received consent from you

Who We Disclose Your Personal Data to?

Unless required to do so by law or by the competent state authority, we will not send, transfer, or otherwise disclose your personal data to any other third parties without your prior approval or consent. In any case, where we are permitted by law to do so, we will notify you of such disclosures.

Refusal to Provide Consent

In the event we require your consent to gather or otherwise process your personal data and you refuse to provide such consent, we will be unable to provide services to you.

How We Retain Your Personal Data

We will retain your personal data only to the extent necessary for the purposes outlined in this privacy notice. We will retain your personal information for the duration of the service you have requested from us and for a period of 10 years thereafter. We may retain your personal data for longer where we have legal grounds to do so.

In the event there is no longer a need for us to retain your personal data, we will delete or anonymize your personal data. Should deletion of your personal data not be possible due to technical considerations (e.g. your personal data is stored in our backup server) we will archive your personal data in such a way so as to ensure that processing is no longer possible in respect of such personal data.

Your Personal Data Rights

As a data subject under the PDPA, you have the following rights:

• Right to withdraw consent
• Right to access your personal data
• Right to rectify your personal data
• Right to request erasure of your personal data
• Right to object processing of your personal data
• Right to request transfer of your personal data (subject to technical considerations and permissibility)
• Right to file a complaint to the Personal Data Protection Committee

You may exercise your right(s) as provided above by contacting us at info@rattananpartners.com

We will endeavor to respond to your lawful request as soon as possible, in any case within 30 days from the date we receive the complete information required. This timeframe may vary depending on the complexity of each request.

Amendment of this Privacy Notice

We may amend this privacy notice from time to time to ensure it is duly updated and to ensure it corresponds to our practice and the relevant legal requirements. You can access our most up-to-date privacy notice at rattananpartners.com/privacy