Privacy Policy

1. Data Controller

The data controller for personal information collected through this website and our services is:

2. Information We Collect

We collect personal information only where it is necessary for delivering our services or responding to enquiries. The categories of information we may collect are:

• Contact details: Full name, email address, and phone number submitted through our contact form or provided during an initial call.
• Session notes: Information shared verbally or in writing during a Concord service, including household circumstances where relevant to the session.
• Usage data: Technical information such as browser type, pages visited, and approximate location, collected via website analytics cookies where consent is given.
• Communication records: Emails or written messages exchanged between you and our team.

Legal basis for processing: Consent (contact form, cookies), performance of a service contract, and legitimate interests in operating and improving our services. We retain contact and session records for up to three years from the last contact, after which they are securely deleted.

3. How We Use Your Information

We use personal information for the following purposes:

• Responding to enquiries and scheduling sessions
• Delivering and tailoring our support services to your household's situation
• Sending service-related communications (booking confirmations, follow-up notes)
• Improving our website and services through anonymised usage data
• Complying with legal obligations under Thai law

We do not use personal information for automated decision-making or profiling. We do not send marketing communications without your explicit consent. We do not sell personal data to any third party.

4. Data Sharing

Information shared with Concord is used only by our team. We do not share personal data with third parties except in the following limited circumstances:

• Service providers who support our website (hosting, analytics) under data processing agreements
• Where required by Thai law or a legal authority
• With your written consent, for referrals to professional services

5. Data Protection Measures

We take reasonable technical and organisational steps to protect personal information, including:

• Access-controlled storage for session notes and contact records
• SSL/TLS encryption for data transmitted via our website
• Internal access limited to team members with a need to know
• Periodic review of storage and access practices

In the event of a data breach likely to affect your rights, we will notify you promptly and take appropriate steps to address the issue.

6. Cookies

Our website uses cookies to maintain basic functionality and, where you consent, to understand how the site is used. For full details of the cookies we set, please see our Cookie Policy. You can manage your cookie preferences at any time on that page.

7. Your Rights

Under the Personal Data Protection Act B.E. 2562 (Thailand's PDPA) and applicable principles, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your data where it is no longer needed or where consent is withdrawn.
• Portability: Receive your data in a commonly used format where technically feasible.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Withdraw any previously given consent at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

8. Third-Party Links

Our website may contain links to external resources, including official government bodies and professional associations. We are not responsible for the privacy practices of those sites. Please review their privacy policies separately.

9. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

10. Policy Updates

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify active clients by email. Continued use of our website after an update constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related questions or to exercise your data rights, please contact: