Privacy Policy

1. Introduction

Devisely ("we", "us", "our") is a documentation practice based in Bangkok, Thailand. We take the privacy of the people we work with seriously. This policy explains what personal data we collect, how we use it, and what rights you have in relation to it. It applies to all visitors to our website and to clients who engage our services.

If you have questions about this policy, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, and telephone number (if provided) when you submit our enquiry form.
• Correspondence: the content of messages you send us by email or through our contact form.
• Service data: documents and information shared with us during sessions (subject to a separate confidentiality agreement).
• Usage data: website analytics including pages visited, duration, and browser type, collected via cookies (see section 6).

We do not collect sensitive personal data (such as health information or financial account details) through our website.

3. How and Why We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries and scheduling sessions (legal basis: contract / pre-contractual steps).
• Delivering our services and producing written outputs for clients (legal basis: contract).
• Sending service-related communications, such as appointment confirmations (legal basis: contract).
• Improving our website and understanding how it is used (legal basis: legitimate interest).
• Complying with applicable laws and regulations in Thailand (legal basis: legal obligation).

We do not use your data for automated decision-making or profiling. We do not send marketing emails without your explicit consent.

Retention: Enquiry data is retained for 12 months. Client service records are retained for 5 years from the date of the last engagement, after which they are securely deleted.

4. Data Sharing

We do not sell personal data. We share data only in the following limited circumstances:

• Service providers: we use third-party tools for email delivery and website analytics. These providers are contractually required to process data only on our behalf and in accordance with this policy.
• Legal requirements: we may disclose data if required to do so by Thai law or a legitimate order from a competent authority.
• Business transfer: if Devisely's business is transferred to another entity, client data may be transferred as part of that process, subject to the same protections.

5. Data Protection Measures

• Website data is transmitted over HTTPS (TLS encryption).
• Access to client files is restricted to team members who require it for their role.
• Physical documents shared during sessions are stored securely and returned or destroyed at project close.
• In the event of a data breach that poses a risk to individuals, we will notify affected parties as soon as reasonably practicable.

6. Cookies

Our website uses cookies to enable basic functionality and to understand how visitors use the site. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies are required for the site to function; all others are optional.

7. Your Rights

Under the Thailand Personal Data Protection Act B.E. 2562 (PDPA), and where applicable under international frameworks, you have the following rights:

• Right to be informed about how your data is used.
• Right to access a copy of the personal data we hold about you.
• Right to rectify inaccurate data.
• Right to erasure ("right to be forgotten") where data is no longer necessary.
• Right to restrict processing in certain circumstances.
• Right to data portability (where processing is automated).
• Right to object to processing based on legitimate interest.
• Right to withdraw consent at any time, where consent is the legal basis for processing.

To exercise any of these rights, email [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Personal Data Protection Committee (PDPC) in Thailand.

8. Third-Party Links

Our website may contain links to external sites, including government departments and official resources. We are not responsible for the privacy practices of those sites. We encourage you to review their policies before providing personal data.

9. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Policy Updates

We may update this policy from time to time. When we do, the date at the top of this page will be revised. Significant changes will be communicated to active clients by email. Continued use of our website after an update constitutes acceptance of the revised policy.

11. Contact

Devisely (Data Controller)
128 Rama III Road, Bang Phongphang, Yan Nawa, Bangkok 10120, Thailand
Email: [email protected]
Phone: +66 2 683 5274