Privacy Policy

Introduction

Vellumate Co., Ltd. ("Vellumate", "we", "us", "our") takes the privacy of your personal information seriously. This Privacy Policy explains what personal data we collect when you use our website or engage our estate organisation and documentation services, how we use it, and what rights you have in relation to it.

This policy applies to all personal data collected through our website at vellumate.biz, via our contact form, or in the course of delivering our services. If you have questions about this policy, please contact us at [email protected].

By using our website or services, you acknowledge that you have read this policy. Our services are intended for adults aged 18 and over.

Information We Collect

We collect only the personal information necessary to respond to enquiries and deliver our services.

Information you provide directly

• Your name and email address when you complete our contact form
• Your telephone number, if provided voluntarily
• Any information you include in the message field of the contact form

Information collected automatically

• Basic server logs including IP address, browser type, and pages visited — retained for 30 days for security purposes
• Cookie consent preferences stored in your browser's local storage

Legal basis for processing (PDPA, Thailand)

Under Thailand's Personal Data Protection Act B.E. 2562 (2019), we rely on the following lawful bases: (a) consent — for optional cookies and marketing communications; (b) contractual necessity — to respond to service enquiries and deliver agreed services; (c) legitimate interests — for basic server logging and website security.

How We Use Your Information

• To respond to your enquiries submitted through the contact form
• To arrange and deliver the specific service you have engaged us for
• To send administrative communications related to your project (scheduling, scope confirmations, handover confirmation)
• To improve our website and understand how it is used, using aggregated analytics data

We do not use your personal data for marketing purposes without your explicit consent, and we do not sell or rent personal data to any third party.

Data Retention

Contact form enquiries are retained for up to 24 months from the date of your last communication with us. Service project records are retained for 36 months after project closure, after which they are deleted. Server logs are deleted after 30 days.

Third Parties and Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Hosting provider: our website is hosted on a server in Thailand. The hosting provider has access to server logs but is bound by confidentiality obligations.
• Analytics tools: if analytics cookies are accepted, usage data may be processed by a third-party analytics provider operating under data processing agreements with us. No identifiable personal data is shared.
• Legal requirements: we may disclose data where required to do so by Thai law or a valid legal order.

We never share personal data with legal, financial, or estate-related service providers. Vellumate has no referral or commercial arrangements with any such professionals.

Data Protection Measures

• Our website uses HTTPS encryption for all data in transit
• Access to contact form submissions is restricted to authorised Vellumate staff only
• Project files produced in the course of service delivery are stored locally and deleted after handover confirmation
• In the event of a personal data breach that poses a risk to your rights, we will notify the relevant Thai supervisory authority within 72 hours and affected individuals without undue delay

Cookies

Our website uses cookies. When you first visit the site, you will be presented with a consent notice allowing you to accept or decline non-essential cookies. Essential cookies required for basic site function are always active.

For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

Your Rights

Under the Thailand Personal Data Protection Act B.E. 2562, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data we hold about you
• Right to rectification — you may ask us to correct inaccurate data
• Right to erasure — you may request that we delete your personal data, subject to our legal retention obligations
• Right to data portability — you may request your data in a structured, commonly used format
• Right to object — you may object to processing carried out on the basis of legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to complain — you may lodge a complaint with the Personal Data Protection Committee of Thailand (PDPC)

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

External Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those websites and recommend that you review their policies independently.

Children's Privacy

Our services are not directed at persons under the age of 18. We do not knowingly collect personal data from anyone under 18. If you become aware that a minor has provided us with personal data, please contact us at [email protected] so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the "Last Updated" date at the top of this page will be revised. Continued use of our website or services after a change constitutes acceptance of the updated policy. For material changes, we will make reasonable efforts to notify affected users directly.

Contact Us

For any questions regarding this Privacy Policy or your personal data: