Privacy Policy

1. Introduction

Chedi Axis Co., Ltd. ("Chedi Axis", "we", "us", or "our") is committed to protecting the privacy of individuals who interact with our website and consulting services. This Privacy Policy explains how we collect, use, store, share, and protect personal data, and describes your rights under Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

This policy applies to personal data collected through our website at https://chedi-axis.biz, through direct communications with our team, and during the course of our consulting engagements.

2. Data We Collect

2.1 Information You Provide

When you use our contact form, send an email, or call our office, we may collect:

• Your full name
• Your email address
• Your phone number (if provided)
• The content of your message or enquiry
• Your organisation name and role (if provided)

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Browser type and version
• IP address (anonymised where possible)
• Pages visited and time spent on each
• Referring website or search terms
• Device type and operating system

This information is collected through cookies and similar technologies. See our Cookie Policy for full details.

2.3 Engagement-Related Data

When you engage Chedi Axis as a consulting client, we may receive and process additional personal data relevant to the engagement scope — for example, employee data in the context of a Management Development Diagnostic. All such data is handled under a separate Data Processing Agreement (DPA) and governed by the engagement's NDA. Engagement data is not covered by this general Privacy Policy.

3. How We Use Your Data

We process personal data for the following purposes and on the following legal bases:

• Responding to enquiries — Legal basis: Legitimate interest / consent
• Administering consulting engagements — Legal basis: Contract performance
• Sending relevant communications (only where consent given) — Legal basis: Consent
• Improving our website and services — Legal basis: Legitimate interest
• Complying with legal obligations — Legal basis: Legal obligation

We do not sell personal data to third parties. We do not use personal data for automated decision-making that produces legal or similarly significant effects.

4. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected:

• Enquiry data: 12 months from last contact, unless a consulting engagement results
• Engagement-related personal data: As specified in the engagement DPA, typically 12 months post-engagement close
• Website analytics data: 26 months (standard for most analytics tools)
• Financial records: 7 years as required by Thai accounting regulations

5. Data Sharing

We may share personal data with the following categories of recipients:

• Technology service providers — such as email, cloud storage, and analytics providers who process data on our behalf under data processing agreements
• Legal and professional advisors — where disclosure is necessary for legal compliance
• Regulatory authorities — where required under Thai law or PDPA

We do not share personal data with marketing or advertising partners.

6. Data Security

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, or disclosure. These include:

• Encrypted transmission (HTTPS) for all website communications
• Password-protected and access-controlled document storage
• Restricted internal access based on role and engagement relevance
• Prompt notification procedures in the event of a data breach
• Regular review of data handling practices

No system of security is completely resistant to compromise. In the event of a breach affecting your data, we will notify you in accordance with PDPA obligations.

7. Cookies

We use cookies on our website for functional and analytical purposes. You can manage your cookie preferences at any time through our Cookie Preference Centre (accessible via the cookie banner or our Cookie Policy page). Essential cookies cannot be disabled as they are required for the website to function correctly.

8. Your Rights Under PDPA

As a data subject under Thailand's PDPA, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your data where there is no overriding legal basis for retention
• Right to object: Object to processing based on legitimate interest
• Right to restriction: Request that we restrict processing in certain circumstances
• Right to data portability: Receive your data in a structured, machine-readable format where processing is based on consent or contract
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any external site before providing personal information.

10. Children's Privacy

Our website and services are directed at business professionals aged 18 and over. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have collected such data, we will delete it promptly.

11. International Data Transfers

Personal data is primarily stored and processed within Thailand. Where we use third-party service providers located outside Thailand, we ensure appropriate safeguards are in place in accordance with PDPA cross-border transfer provisions.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page will reflect the most recent revision. Where changes are significant, we will take reasonable steps to notify affected individuals.

13. Contact

For any questions about this Privacy Policy or your data:

• Email: [email protected]
• Post: Chedi Axis Co., Ltd., 53 Narathiwat Ratchanakharin Road, Yan Nawa, Bangkok 10120, Thailand
• Phone: +66 2 531 7482