Privacy Policy | Vestwell

Vestwell is committed to handling any personal information you share with us carefully and responsibly. This policy explains what we collect, why, how we use it, and what your rights are under Thai law, specifically the Personal Data Protection Act B.E. 2562 (PDPA).

1. Who We Are

Vestwell is a records organisation and information service operating from 64 Thanon Mittraphap, Nai Mueang, Mueang Khon Kaen, Khon Kaen 40000, Thailand. We are the data controller for personal information provided to us through our website and services. For privacy-related enquiries, contact us at [email protected].

2. Information We Collect

Through our contact form:

Your name and email address (required)
Phone number (optional, if you choose to provide it)
Any message content you send to us

Through our website:

Cookies and similar technologies (see Section 6 and our Cookie Policy)
Basic usage data such as pages visited and browser type, collected via analytics if you consent

When you use our services in person:

Contact details needed to deliver the service
Document information only as necessary to complete your filing or digitisation project

3. Why We Use Your Information

We use the information you provide only for the following purposes:

To respond to your enquiries — contact form submissions are used solely to reply to you
To deliver the service you have engaged us for — applicable information is used to carry out your filing setup, seminar registration, or digitisation project
To keep basic service records — we retain a record of completed engagements for our own administrative purposes
To improve our website and services — only with your consent via analytics cookies

We do not use your information for any form of marketing, profiling, or targeting. We do not pass information to third parties for commercial purposes.

4. Legal Basis for Processing

Contract performance — where information is necessary to deliver a service you have requested
Legitimate interests — for basic administrative record-keeping in connection with our business
Consent — for any optional cookies or analytics tracking, which you control via our cookie settings

5. Data Retention

Contact enquiry data is held for up to twelve months from the date of last contact. Service engagement records are held for five years for administrative purposes. After these periods, data is deleted or anonymised. You may request earlier deletion (see Section 9).

6. Cookies

Our website uses essential cookies required for basic functionality and optional analytics cookies. You can manage your cookie preferences at any time via our Cookie Policy page. We do not use marketing cookies or sell any data to advertisers.

7. Data Security

We take reasonable steps to protect the personal information we hold:

Website access is via HTTPS (encrypted connection)
Access to client records is limited to Vestwell staff directly involved in your service
Physical documents handled during in-person services are returned to you upon completion — no copies are retained
Digital files created during a digitisation project are placed only on storage you provide and are not kept on Vestwell systems

No system is entirely free from risk. In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authority as required under PDPA.

8. Third Parties

We do not sell, rent, or share personal data with third parties for marketing purposes. We may share information in the following limited circumstances:

With service providers who assist us in operating our website (such as hosting providers), under data processing agreements that restrict their use of your data
Where required by law or a legitimate legal process

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites.

9. Your Rights Under PDPA

As a data subject under Thai PDPA, you have the following rights:

Access — to request a copy of the personal data we hold about you
Rectification — to ask us to correct inaccurate or incomplete data
Erasure — to request deletion of your data where we have no overriding legal basis to retain it
Data portability — to receive your data in a structured, commonly used format
Objection — to object to processing based on our legitimate interests
Withdrawal of consent — to withdraw any consent you have given at any time, without affecting prior lawful processing
Complaint — to lodge a complaint with the Personal Data Protection Committee of Thailand

To exercise any of these rights, contact us at [email protected] or by phone at +66 43 327 6914. We will respond within thirty days.

10. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If we become aware that we have done so, we will delete the information promptly.

11. Changes to This Policy

We may update this policy from time to time. The most recent version will always be available on this page, with the date of last update shown at the top. Continued use of our services following any update constitutes acceptance of the revised policy.

12. Contact

For any privacy-related questions or requests:
Email: [email protected]
Phone: +66 43 327 6914
Address: 64 Thanon Mittraphap, Nai Mueang, Mueang Khon Kaen, Khon Kaen 40000, Thailand