1. Introduction and Scope
Quillstone ("we", "us", "our") operates as a data and analytics advisory firm based in Bangkok, Thailand. This Privacy Policy applies to personal data collected through our website, enquiry forms, and service engagements.
By visiting our website or submitting your information through any of our forms, you acknowledge that you have read and understood this policy.
For questions about this policy, please contact us at [email protected].
2. Data We Collect
We collect personal data only when it is provided to us voluntarily or when it arises naturally from your use of our website.
Information you provide directly
- Your name and job title
- Business email address and phone number
- Company name and nature of enquiry
- Any details shared in message fields or during consultations
Information collected automatically
- IP address and general geographic region
- Browser type and device type
- Pages visited, referral source, and session duration
- Cookie identifiers (see Section 5 and our Cookie Policy)
3. Legal Basis and Purpose of Processing
| Purpose | Data used | Legal basis |
|---|---|---|
| Respond to an enquiry | Name, email, message | Legitimate interest / Pre-contractual steps |
| Deliver advisory services | Contact and project details | Contract performance |
| Service communications | Email address | Contract performance |
| Improve website performance | Analytics data | Legitimate interest |
| Optional marketing updates | Email address | Consent |
We retain contact and project data for up to five years following the end of a client engagement, and website analytics data for up to 26 months, after which it is deleted or anonymised.
4. How We Use Your Data
- ›To respond to your enquiries and schedule initial conversations about our services.
- ›To deliver the specific advisory or reporting work you have engaged us for.
- ›To send relevant service updates, meeting notes, or follow-up materials.
- ›To understand how our website is used and identify areas we can improve.
- ›To comply with applicable laws and professional obligations.
We do not sell, rent, or trade your personal information to third parties for commercial purposes.
5. Cookies
Our website uses cookies to support basic functionality, analyse traffic, and remember your preferences. Cookies are small text files stored on your device.
Essential cookies
Required for the site to function. Cannot be disabled.
Analytics cookies
Help us understand how visitors use the site. Only active with your consent.
Preference cookies
Remember your choices such as cookie consent status. Only active with your consent.
For full details and to manage your choices, please visit our Cookie Policy.
6. Data Protection Measures
We take reasonable technical and organisational steps to protect your personal data against accidental loss, unauthorised access, or disclosure.
Encrypted transmission
All data submitted through our website is transmitted over TLS-encrypted (HTTPS) connections.
Access controls
Access to client data is limited to team members with a direct need as part of service delivery.
Third-party processors
We only use reputable service providers who process data under appropriate safeguards.
Breach notification
In the event of a data breach that poses a risk to individuals, we will notify affected parties promptly.
7. Your Rights
Under the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and applicable data protection principles, you have the following rights regarding your personal data:
Right to access
Request a copy of personal data we hold about you.
Right to rectification
Request correction of inaccurate or incomplete data.
Right to erasure
Request deletion of your data where there is no legitimate reason for us to continue holding it.
Right to data portability
Request your data in a structured, commonly used format.
Right to object
Object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Third-Party Links
Our website may contain links to external websites or resources. We are not responsible for the privacy practices of those sites. We encourage you to review their individual privacy policies before submitting personal information.
9. Children's Privacy
Our services are intended for business professionals and organisations. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted information through our site, please contact us and we will remove it promptly.
10. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable regulations. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website after changes take effect constitutes your acknowledgment of the updated policy.
Data-related enquiries
For questions about this policy or to exercise your data rights, please reach out to us directly.
Email: [email protected]
Post: 212 Silom Road, Suriyawong, Bang Rak, Bangkok 10500, Thailand
Phone: +66 2 237 4891