Privacy Policy

Introduction

Tarisma ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, engage our consulting services, or communicate with us.

We operate from Bangkok, Thailand, and our data practices comply with the Personal Data Protection Act B.E. 2562 (2019) of Thailand and applicable international data protection regulations where our clients are located.

For questions regarding this Privacy Policy or our data practices, please contact us at [email protected].

Information We Collect

Personal Information You Provide

We collect information that you voluntarily provide when you:

• Submit inquiry forms through our website
• Request consultation appointments
• Engage our consulting services
• Correspond with us via email or phone
• Participate in working sessions or workshops

This information may include your name, email address, phone number, company name, job title, business address, and any other details you choose to provide.

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

• IP address and device identifiers
• Browser type and version
• Pages visited and time spent on site
• Referring website addresses
• General location data (city and country)

This data is collected through cookies and similar technologies. For detailed information about our cookie usage, please review our Cookie Policy.

How We Use Your Information

We use collected information for the following purposes:

Service Delivery

• Responding to inquiries and scheduling consultations
• Providing strategic consulting services
• Conducting research and analysis for client engagements
• Delivering project documentation and recommendations

Communication

• Sending service-related communications
• Providing engagement updates and deliverables
• Responding to requests and questions
• Sharing relevant industry insights (with consent)

Business Operations

• Processing payments and maintaining financial records
• Improving our website and services
• Conducting internal analysis and quality assurance
• Complying with legal obligations and professional standards

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide consulting services you have engaged
• Consent: Where you have provided explicit consent for specific processing activities
• Legitimate Interest: Business operations, service improvement, and fraud prevention
• Legal Obligation: Compliance with accounting, tax, and professional regulations

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share data with:

Service Providers

Third-party vendors who assist with website hosting, email services, payment processing, and data storage. These providers are contractually bound to protect your information and use it only for specified purposes.

Professional Advisors

Legal counsel, accountants, and auditors as required for professional compliance and business operations.

Legal Requirements

Government authorities when required by law, court order, or regulatory requirement.

Business Transfers

In connection with potential mergers, acquisitions, or asset sales, subject to confidentiality commitments.

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure servers with access controls
• Regular security audits and updates
• Employee training on data protection
• Confidentiality agreements with staff and contractors

However, no method of transmission over the internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain personal information for different periods based on its purpose:

• Client engagement data: Seven years following project completion (professional and tax requirements)
• Inquiry and prospect data: Two years from last contact
• Marketing consent data: Until consent is withdrawn
• Website analytics: Fourteen months

Upon expiration of retention periods, we securely delete or anonymize personal information.

Your Rights

Under Thai data protection law and applicable international regulations, you have the following rights:

• Right to Access: Request copies of your personal information we hold
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Data Portability: Receive your data in structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Restrict Processing: Request limitation of processing in certain circumstances
• Right to Withdraw Consent: Withdraw consent for processing activities where consent was the legal basis

To exercise these rights, please contact us at [email protected]. We will respond to your request within thirty days.

You also have the right to lodge a complaint with the Personal Data Protection Committee of Thailand or your local supervisory authority.

International Data Transfers

Our primary operations are in Thailand. When working with clients or service providers in other countries, we may transfer personal information internationally. Such transfers are conducted:

• To countries with adequate data protection standards recognized by Thai authorities
• Under contractual data protection clauses
• With your explicit consent

Children's Privacy

Our services are directed to businesses and professionals. We do not knowingly collect personal information from individuals under eighteen years of age. If you believe we have inadvertently collected such information, please contact us immediately.

Third-Party Links

Our website may contain links to external sites not operated by us. We are not responsible for the privacy practices of these third-party websites. We encourage you to review their privacy policies before providing any personal information.

Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending email notification to active clients

Continued use of our services after changes become effective constitutes acceptance of the updated policy.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: