Privacy Policy

Introduction

Stratline is committed to protecting the privacy and security of personal information we collect from individuals who engage with our consulting services. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with applicable data protection laws, including Thailand's Personal Data Protection Act (PDPA) and the European Union's General Data Protection Regulation (GDPR) where applicable.

By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you have questions or concerns about how we handle your personal information, please contact us at [email protected].

Data We Collect

We collect personal information that you voluntarily provide to us when you inquire about our services, engage us for consulting work, or interact with our website. The types of personal data we may collect include:

• Contact Information: Name, email address, phone number, job title, company name, and business address
• Communication Data: Records of correspondence, meeting notes, and consultation discussions
• Professional Information: Details about your organization, industry, role, and consulting needs
• Website Usage Data: IP address, browser type, device information, pages visited, and time spent on our website through cookies and analytics tools
• Payment Information: Billing details and transaction records when you engage our services (payment processing handled by third-party providers)

We collect this information through contact forms, email communications, phone calls, in-person meetings, and automated technologies such as cookies when you visit our website.

How We Use Your Data

We process your personal data for the following purposes, based on legitimate business interests and, where required, your consent:

• Service Delivery: To provide consulting services, conduct assessments, facilitate retreats, and deliver agreed engagements
• Communication: To respond to inquiries, schedule consultations, and maintain ongoing client relationships
• Contract Performance: To fulfill contractual obligations, including project management and deliverable preparation
• Business Operations: To manage invoicing, payment processing, and administrative tasks
• Service Improvement: To analyze engagement outcomes and refine our consulting methodologies
• Legal Compliance: To meet regulatory requirements, maintain records, and protect our legal rights
• Marketing Communications: To send relevant information about our services with your consent (you may opt out at any time)

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Legal Basis for Processing

Our legal basis for processing personal data depends on the specific context and purposes:

• Contractual Necessity: Processing required to perform consulting services you have engaged us to provide
• Legitimate Interests: Processing necessary for our business operations, quality improvement, and client relationship management
• Consent: Processing based on your explicit consent, particularly for marketing communications
• Legal Obligations: Processing required to comply with applicable laws, regulations, or legal processes

Data Sharing and Third Parties

We may share your personal information with the following categories of third parties:

• Service Providers: Third-party vendors who assist with website hosting, email services, payment processing, and data analytics
• Professional Advisors: Legal, financial, or business consultants who require access to support our operations
• Regulatory Authorities: Government agencies or legal entities when required by law or to protect our legal rights

All third parties are bound by confidentiality agreements and process personal data only for specified purposes. We ensure appropriate safeguards are in place when data is transferred internationally.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Client Data: Retained for the duration of the engagement plus seven years for legal and tax compliance purposes
• Marketing Data: Retained until you withdraw consent or request deletion
• Website Analytics: Typically retained for twenty-six months
• Inquiry Data: Retained for two years if no engagement proceeds

Data Security

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction:

• Encrypted data transmission using SSL/TLS protocols
• Secure storage systems with access controls and authentication requirements
• Regular security assessments and updates to protect against vulnerabilities
• Confidentiality agreements with all staff and contractors who handle personal data
• Incident response procedures for potential data breaches

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience and analyze website usage. For detailed information about our cookie practices, including how to manage your preferences, please refer to our Cookie Policy.

Your Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

• Right to Access: Request copies of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation on how we process your data
• Right to Data Portability: Request transfer of your data to another organization or directly to you
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty days.

Children's Privacy

Our services are intended for businesses and professional audiences. We do not knowingly collect personal information from individuals under eighteen years of age. If we become aware that we have collected data from a minor, we will take steps to delete such information.

International Data Transfers

While we primarily operate in Thailand, some service providers we use may process data outside Thailand. When we transfer personal data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this policy regularly. Continued use of our services after changes indicates acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Supervisory Authority

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the relevant data protection authority. In Thailand, this is the Personal Data Protection Commission. For EU residents, you may contact your local data protection authority.