Privacy Policy

1. Who We Are

Trovata is a household records organisation service based at 22 Klang Muang Road, Nai Muang, Muang, Khon Kaen 40000, Thailand. We are the data controller for personal information collected through this website and in the course of our services. For data-related enquiries, contact us at [email protected].

2. Information We Collect

2.1 Information you provide directly

• Name — collected via the website contact form and in session correspondence.
• Email address — used to respond to enquiries and send session-related communications.
• Phone number — optional; used only to contact you about a session you have requested.
• Message content — the text you enter in the contact form to describe your enquiry.

2.2 Information collected automatically

• Standard web server logs (IP address, browser type, pages visited) for security and site operation purposes.
• Cookie consent preferences stored in your browser's localStorage.
• Anonymous analytics data (page views, session duration) if you consent to analytics cookies.

2.3 Session-related information

During a household records session, we may note document titles, locations, and other organisational details on your behalf. We do not retain copies of documents and do not store session notes beyond the duration needed to prepare your printed outputs, which are then handed to you in full.

3. Legal Basis for Processing

We process personal data under the following legal bases, consistent with Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

• Consent — for optional cookies and marketing communications, where you have given clear consent.
• Contract — to fulfil a session booking you have requested.
• Legitimate interests — for website security, fraud prevention, and responding to enquiries you have initiated.
• Legal obligation — where required by applicable Thai law.

4. How We Use Your Information

• To respond to website enquiries and arrange session bookings.
• To communicate relevant session information before, during, and after your booking.
• To maintain records of completed engagements for business administration purposes.
• To improve this website based on anonymous usage patterns (with consent).
• To comply with legal obligations under Thai law.

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your information for automated decision-making or profiling.

5. Data Retention

• Contact form enquiries: retained for 12 months from the date of last communication, then deleted.
• Completed session records: basic booking records retained for 3 years for business purposes, then deleted.
• Session notes: not retained after printed outputs are handed over.
• Cookie consent records: stored in your browser's localStorage until cleared by you.
• Website server logs: retained for 90 days, then automatically deleted.

6. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, or disclosure. These include:

• HTTPS encryption for all data transmitted through this website.
• Access controls limiting who within our team can access contact records.
• No retention of document copies from household sessions.
• Regular review of data handling practices by our team.

In the event of a data breach affecting your personal information, we will notify you and the relevant Thai supervisory authority as required under the PDPA.

7. Cookies

This website uses cookies and similar technologies. Essential cookies are required for the site to function. Optional analytics and preference cookies are only used with your consent. Full details are available in our Cookie Policy.

8. Third-Party Services

This website may use third-party services including Google Analytics (if consented) and Google Maps for location display. These services have their own privacy policies. We recommend reviewing them if you have concerns. We are not responsible for the privacy practices of external websites linked from this site.

9. Your Rights

Under Thailand's PDPA, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your data in certain circumstances.
• Right to restriction — request that we limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — withdraw consent for any processing based on consent, at any time.
• Right to lodge a complaint — contact the Personal Data Protection Committee of Thailand if you believe your rights have been infringed.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has provided personal data to us, please contact us and we will delete it promptly.

11. International Data Transfers

Your data is processed and stored within Thailand. If any third-party tools we use involve international data transfers, those transfers are governed by the relevant service provider's data protection measures and applicable Thai law.

12. Policy Updates

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be notified via the website homepage. Continued use of this website after changes take effect constitutes acceptance of the revised policy.

13. Contact

For any questions about this policy or about how we handle your data: