Privacy Policy
Last Updated: 7 February 2025 · Effective Date: 7 February 2025
1. Introduction
Prismara ("we," "us," or "our") is committed to protecting the personal data of anyone who visits our website or engages with our services. This Privacy Policy explains what data we collect, how we use it, and the rights you have in relation to it.
Prismara operates in Thailand and processes personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) (PDPA) and other applicable Thai and international data protection laws.
Questions regarding this policy can be directed to: [email protected]
2. Data We Collect
2.1 Information You Provide
When you contact us through our website or by other means, we may collect:
- Full name and email address
- Phone number (if provided)
- Message content and project description
- Company name or role (if provided voluntarily)
2.2 Automatically Collected Data
When you visit our website, certain data is collected automatically:
- IP address and general geographic location
- Browser type and operating system
- Pages viewed and time spent on site
- Referring URLs and navigation paths
- Cookie data (see our Cookie Policy for details)
2.3 Legal Basis for Processing
- Consent: for marketing communications and non-essential cookies
- Legitimate interests: for website analytics, security, and service improvement
- Contract performance: for data necessary to deliver agreed services
- Legal obligation: where Thai law requires data retention or reporting
3. How We Use Your Data
- To respond to your enquiries and assess whether our services suit your needs
- To deliver, manage, and document agreed engagement work
- To communicate about project status and deliverables
- To improve our website and understand how visitors interact with it
- To meet our legal obligations under Thai law and applicable regulations
- To send relevant service information where you have opted in
We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
4. Data Retention
We retain personal data only as long as necessary for the purpose it was collected:
- Enquiry contact data: up to 2 years from last contact if no engagement commenced
- Client project data: up to 5 years from project close, or as required by law
- Website analytics data: up to 26 months in aggregated form
- Cookie consent records: 12 months from consent date
5. Data Protection Measures
- Encrypted data transmission via HTTPS/TLS across all website communications
- Access to personal data restricted to team members with a direct operational need
- Non-disclosure agreements covering all client data accessed during engagements
- Internal data handling procedures reviewed periodically for compliance
- Breach notification procedures in line with PDPA requirements
6. Cookies
We use cookies on our website to support basic functionality, understand site usage, and improve your experience. You can manage your cookie preferences through our Cookie Policy page, which includes category-level controls.
Essential cookies cannot be disabled as they are required for the site to function. Optional cookies (analytics, preferences, marketing) can be toggled at any time.
7. Third-Party Services
We may use the following third-party services, each operating under their own privacy terms:
- Google Analytics: website usage analytics (can be opted out via cookie settings)
- Google Maps: embedded map on our website showing our office location
- Font providers: Google Fonts and Fontshare for web typography
We do not pass identifiable personal data to any of these services beyond what is inherent in normal website operation (e.g., IP address to Google Analytics, which is anonymized where possible).
8. Your Rights Under PDPA
Under Thailand's Personal Data Protection Act, you have the following rights:
- Right to access: request a copy of personal data we hold about you
- Right to rectification: request correction of inaccurate or incomplete data
- Right to erasure: request deletion of your data under certain conditions
- Right to restrict processing: request we limit how we process your data
- Right to data portability: receive your data in a structured, commonly used format
- Right to object: object to processing based on legitimate interests
- Right to withdraw consent: at any time where processing is based on consent
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. External Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies before providing any personal data.
10. Children's Privacy
Our services are directed to businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received data from a minor, contact us and we will delete it promptly.
11. Policy Changes
We may update this Privacy Policy periodically. Material changes will be communicated via a notice on our website. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our website after changes constitutes acceptance of the revised policy.
12. Contact Information
For privacy-related questions or to exercise your rights:
Prismara234 Rama IV Road, Klong Toei
Bangkok 10110, Thailand
Email: [email protected]
If you are not satisfied with our response, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).