Privacy Policy

1. Introduction

Northrest ("we", "us", "our") is committed to handling your personal information with care and transparency. This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and what rights you have in relation to it.

This policy applies to all personal data collected through our website at northrest.club and through interactions related to our document organisation and information services. It operates in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA).

If you have any questions about this policy, please contact us at [email protected].

2. Data We Collect

Information you provide directly

• Full name and contact details (email address, telephone number) submitted via our enquiry form
• Any message or additional information you choose to include in your enquiry

Information collected automatically

• Basic website usage data (pages visited, approximate location by country, browser type) via analytics tools
• Cookie consent preferences stored locally in your browser

What we do not collect

We do not collect, copy, or store any pension documents, financial records, or personal paperwork brought to or discussed during sessions. All documents remain in your possession at all times.

3. Legal Basis for Processing

We process personal data on the following legal grounds under the PDPA:

• Consent — when you submit an enquiry form or agree to cookies
• Legitimate interests — for routine website operation and responding to enquiries about our services
• Legal obligation — where Thai law requires us to retain or report certain information

4. How We Use Your Data

• To respond to your enquiry and arrange session appointments
• To send confirmations and session-related correspondence
• To improve our website and understand how it is used (analytics only)
• To comply with applicable Thai laws and regulations

We do not use your personal data for direct marketing without your explicit consent. We do not sell or share your data with third parties for their own commercial purposes.

5. Data Sharing

We may share limited personal data with:

• Website hosting and analytics providers — for the operation of our website
• Email service providers — solely to deliver messages you have requested
• Thai regulatory authorities — where required by law

All service providers who handle personal data on our behalf are required to process it only as instructed and with appropriate security measures in place.

6. Data Retention

Enquiry data (name, email, phone, message) is retained for up to 24 months from the date of last contact, after which it is securely deleted. Website analytics data is retained for up to 12 months. You may request earlier deletion at any time — see Section 9.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encrypted transmission (HTTPS) for all data sent via our website
• Access restrictions — only authorised staff can access personal enquiry data
• Regular review of our data handling practices

In the unlikely event of a data breach affecting your personal information, we will notify you and the relevant Thai supervisory authority as required by the PDPA.

8. Cookies

We use essential cookies to keep our website functioning and, with your consent, analytics cookies to understand site usage. We do not use marketing or tracking cookies without explicit consent. For full details, please see our Cookie Policy.

9. Your Rights Under the PDPA

As a data subject under Thailand's PDPA, you have the following rights:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data in certain circumstances
• Right to data portability — receive your data in a commonly used format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent at any time without affecting prior lawful processing
• Right to lodge a complaint — with the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to third-party websites (for example, Google Maps). We are not responsible for the privacy practices of those websites and encourage you to review their policies independently.

11. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data to us, please contact us immediately so we can remove it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website following a change constitutes acceptance of the updated policy. For significant changes, we will make a reasonable effort to provide notice.

13. Contact & Data Controller

Data Controller: Northrest
Address: 21 Mukkamontri Road, Nai Muang, Nakhon Ratchasima 30000, Thailand
Email: [email protected]
Tel: +66 44 318 902