This site collects very little. This page says exactly what, and what happens to it. Proviso is the data controller for the personal data described here, and the contact route for anything on this page is info@proviso-consulting.net.
What this site collects
There are three ways personal data reaches us or a third party through this website. There is no contact form, no newsletter signup, no account, no advertising and no analytics product installed on the site.
| Route | What is collected | Why | Who else sees it |
|---|---|---|---|
| Calendly booking widget | Your name, your email address, the time slot you choose, your time zone, and anything you type into the booking questions | To schedule the call you asked for and to send you the confirmation and reminder | Calendly LLC, which runs the widget and stores the booking on its own systems under its own privacy policy |
| Email to info@ | Your email address, your name if you give it, and whatever you choose to write | To answer your enquiry | The email provider that carries and stores the message |
| Simply loading a page | Your IP address, browser type and the page requested, in ordinary server logs | To serve the site and keep it working | Netlify, which hosts the site. Google, which serves the two typefaces the site uses and therefore receives the request |
The typefaces are loaded from Google Fonts, which means your browser makes a request to Google and Google receives your IP address as part of that request. That is the only third-party request on a page other than the booking widget.
Cookies
This site sets no cookies of its own. It does not track you between visits and it does not build a profile of you. The Calendly widget is a third-party embed and may set its own cookies when it loads on the contact section of the homepage. Those are Calendly's, governed by Calendly's own policy, and your browser settings control them.
How long we keep it
Enquiry emails are kept while the enquiry is live, and afterwards as part of our correspondence records. Booking records are kept while the booking is relevant and for our own record of who we have spoken to. Where an enquiry becomes an engagement, the file is kept for as long as the matter and our professional record-keeping require.
Where you ask us to delete something and we are not required to keep it, we delete it rather than archive it. Server logs are held by the hosting provider on its own retention schedule and are not something we read or keep separately.
We do not sell it or share it for marketing
Your data is not sold, rented, traded or passed to anyone for marketing. It is not used to build advertising audiences. The only parties who handle it are the ones in the table above, and each does so in order to run the service it provides. We do not send marketing email to people who have only made an enquiry.
Your rights under the PDPA
Thailand's Personal Data Protection Act B.E. 2562 gives you a set of rights over personal data held about you. In plain terms, and with the section that grants each one:
- Access and a copy
- You may ask for access to the personal data we hold about you and for a copy of it. Where the request cannot be refused, it must be met without delay and within thirty days of receipt [PDPA, section 30].
- Portability
- You may ask to receive your personal data in a commonly used electronic format, and to have it sent to another controller where that can be done automatically [PDPA, section 31].
- Objection
- You may object to the collection, use or disclosure of your personal data in the cases the Act sets out [PDPA, section 32].
- Erasure
- You may ask to have your personal data erased, destroyed, or made anonymous, on the grounds set out in the Act, which include data no longer being necessary for the purpose it was collected for, and withdrawal of the consent it was based on [PDPA, section 33].
- Restriction
- You may ask us to restrict the use of your personal data in the situations the Act lists [PDPA, section 34].
- Correction
- Personal data must be kept accurate, up to date, complete and not misleading, and you may ask for it to be corrected [PDPA, sections 35 and 36].
- Withdrawing consent
- Where we rely on your consent, you may withdraw it at any time. Withdrawal does not undo anything lawfully done while the consent was in place [PDPA, section 19].
- Complaint
- You have a right to complain, which the Act lists among the rights a controller must tell you about [PDPA, sections 23(6) and 73].
How to exercise them
Email info@proviso-consulting.net and say what you want. Tell us which right you are exercising and enough about yourself for us to find the record. We will confirm receipt and act within the period the Act allows. There is no charge.
If your data reached Calendly through the booking widget, a deletion request to us covers the copy we hold. Calendly holds its own copy on its own systems, so a request to Calendly directly is the way to remove that one, and we will tell you so rather than pretend otherwise.
Security
We are required to have appropriate measures in place to prevent unauthorised or unlawful loss of, access to, use, alteration or disclosure of personal data, and to review those measures as circumstances change [PDPA, section 37(1)]. In practice, for a site of this size, that means the data lives in the email account and the booking account, both of which are access-controlled, and nothing is kept on the website itself.
Changes to this notice
If we add anything to the site that collects data, this page changes before it goes live, and the date at the top changes with it.
This notice describes what this website does. It is not legal advice on your own data protection position. See also our disclaimer and terms of use.
← Back to home