1. Data Controller
The data controller for personal information processed in connection with Successio's website and programs is:
- Successio
- 38 Asoke Montri Soi 7, Khlong Toei Nuea, Watthana, Bangkok 10110, Thailand
- Email: [email protected]
- Phone: +66 81 273 6485
2. Personal Data We Collect
Information you provide directly:
- Name and contact details (email address, phone number) — when you submit an enquiry through our contact form
- Address — if required for delivery of printed reading packs or monthly program mailings
- Your message content — when you contact us
- Information about your household situation — shared voluntarily during consulting engagements
Information collected automatically:
- Browser type, device type, and approximate geographic location via standard server logs
- Pages visited and time spent — collected via analytics cookies if you have consented
- Cookie preferences — stored in your browser's local storage
3. Legal Basis for Processing
We process personal data under the following legal bases, as provided by Thailand's Personal Data Protection Act B.E. 2562 (PDPA):
- Consent — for marketing communications and non-essential analytics cookies, where you have opted in
- Contractual necessity — for delivery of reading packs and consulting engagement deliverables
- Legitimate interests — for responding to enquiries and maintaining operational records
- Legal obligation — where we are required by Thai law to retain certain records
4. How We Use Your Data
- To respond to enquiries submitted through our contact form
- To deliver reading packs and program materials to your postal address
- To conduct and document consulting engagements
- To send the monthly Heritage Reading Program mailings to subscribers
- To improve the website and understand which content is most useful (with consent for analytics)
- To comply with applicable Thai legal and regulatory requirements
We do not sell or rent your personal data to third parties. We do not use personal data for automated decision-making or profiling.
5. Data Retention
- Enquiry records: retained for 12 months from the date of last contact, then deleted
- Consulting engagement records: retained for 3 years from the engagement completion date, then deleted
- Heritage Program subscriber records: retained for the duration of the subscription plus 12 months
- Delivery address records: deleted within 30 days of the final delivery associated with your order
- Analytics data: aggregated and anonymised within 12 months; raw data deleted sooner
6. Data Sharing
We share personal data only in the following limited circumstances:
- Postal and courier services — your name and delivery address are shared with postal or courier providers solely for the purpose of delivering physical materials
- Website hosting and infrastructure providers — server logs may be accessible to our hosting provider, bound by data processing agreements
- Analytics providers — aggregated, anonymised data only, where you have consented to analytics cookies
- Legal authorities — where disclosure is required by Thai law or court order
All third-party providers used by Successio are required to handle personal data in accordance with applicable data protection requirements.
7. Security Measures
- All data transmission via the website uses HTTPS encryption
- Access to client records is restricted to Successio staff on a need-to-know basis
- Physical consulting notes are stored securely and disposed of through secure shredding
- We conduct periodic reviews of our data handling practices
- In the event of a data breach affecting your personal data, we will notify you within the timeframes required by the PDPA
8. Cookies
Our website uses cookies to support basic functionality and, with your consent, to understand how visitors use the site. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.
9. Your Rights Under the PDPA
As a data subject under Thailand's Personal Data Protection Act, you have the following rights:
- Right to access — to request a copy of the personal data we hold about you
- Right to rectification — to ask us to correct inaccurate or incomplete data
- Right to erasure — to request deletion of your personal data, subject to legal retention obligations
- Right to data portability — to receive your data in a structured, commonly used format
- Right to object — to object to processing based on legitimate interests
- Right to withdraw consent — to withdraw consent for processing based on consent at any time, without affecting the lawfulness of prior processing
- Right to lodge a complaint — with the Office of the Personal Data Protection Committee (PDPC) of Thailand
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
10. Third-Party Links
Our website may contain links to external websites. Successio is not responsible for the privacy practices of those websites. We recommend reviewing the privacy policy of any third-party site you visit.
11. Children's Privacy
Successio's programs and website are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted information through our website, please contact us at [email protected] and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the website following any update constitutes acceptance of the revised policy.
13. Contact for Data Enquiries
For any questions about how your data is handled, or to exercise your rights under the PDPA:
- Email: [email protected]
- Post: Successio, 38 Asoke Montri Soi 7, Khlong Toei Nuea, Watthana, Bangkok 10110, Thailand
- Phone: +66 81 273 6485 (Monday–Friday, 9:00–17:30)