Privacy Policy

1. Introduction

Greywell ("we", "us", "our") is an information and records support service based at 142 Sathon Tai Road, Sathon, Bangkok 10120, Thailand. We are committed to handling any personal information you share with us carefully, transparently and only for the purpose for which it was given.

This policy explains what personal data we collect through our website, how we use and store it, and the choices available to you. It applies to all visitors and anyone who contacts us through the enquiry form on this site.

If you have questions about anything in this document, please write to us at [email protected].

2. Information We Collect

We collect a small amount of information, only when you choose to provide it or when it arises naturally from your visit to our website.

Information you give us directly

• Your name
• Your email address
• Your phone number (if provided)
• The content of any message you send through the enquiry form

Information collected automatically

• Pages you visit and time spent on each page (via analytics cookies)
• Your approximate location (country or city level) based on IP address
• Browser type and device category
• Referral source (how you found our site)

Legal basis for processing

• Consent — when you submit the enquiry form or accept optional cookies
• Legitimate interest — for understanding general website usage to improve our service
• Legal obligation — when required by applicable Thai law

3. How We Use Your Information

• To respond to your enquiry and discuss which of our sessions or services may be suitable for you
• To send you information about upcoming talks, guides or community meetings if you have asked to hear from us
• To understand how visitors use our website so we can keep it clear and useful
• To meet any legal or regulatory obligations that apply to our operations in Thailand

We do not use your personal data for automated decision-making or profiling. We do not sell or share your personal data with third parties for their own marketing purposes.

4. Data Retention

We keep enquiry records for up to two years from the date of contact, after which they are deleted securely. Analytics data is retained for no longer than fourteen months.

If you ask us to remove your information sooner, we will do so promptly (see Section 7 for how to make such a request).

5. Sharing and Third Parties

We use a small number of trusted services to operate our website:

• Google Analytics — to understand aggregate visitor behaviour. Data is anonymised where possible.
• Web hosting provider — our website files and form submissions are stored on a secure server.
• Email service — to receive and respond to your messages.

Each of these providers processes data only as instructed and under appropriate data protection agreements. We do not transfer personal data outside Thailand except where the recipient country offers an adequate level of protection.

6. How We Protect Your Data

• Our website uses HTTPS encryption for all data in transit
• Form submissions are stored on access-controlled servers
• Only the people at Greywell who need to see your information have access to it
• We review our data-handling practices regularly

In the event of a data breach that affects your personal information, we will notify you and the relevant authority as required by applicable law without undue delay.

7. Cookies

Our website uses cookies — small text files stored in your browser — for essential functionality and, with your consent, for analytics purposes. We do not use advertising or tracking cookies without your explicit agreement.

For a full explanation of the cookies we use and how to manage them, please visit our Cookie Policy.

8. Your Rights

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct any inaccurate or incomplete information
• Erasure — ask us to delete your personal data where there is no longer a reason to hold it
• Portability — receive your data in a common electronic format
• Restriction — ask us to pause processing your data in certain circumstances
• Objection — object to processing carried out on the basis of legitimate interest
• Withdrawal of consent — withdraw any consent you have given at any time, without affecting prior processing

To exercise any of these rights, please email [email protected]. We will respond within thirty days. You also have the right to raise a concern with Thailand's Personal Data Protection Committee if you are not satisfied with our response.

9. External Links

Our website may contain links to other websites for your convenience. We are not responsible for the privacy practices of those sites and encourage you to read their policies before sharing any personal information with them.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe we have received such information in error, please contact us and we will remove it promptly.

11. Changes to This Policy

If we update this policy, the revised version will be posted on this page with a new "Last updated" date. Where changes are significant, we will make this clear at the top of the page. Continuing to use the website after any update means you are aware of the changes.

12. Contact

For privacy-related enquiries, please reach us at: