This Privacy Policy explains how we collect, use, disclose, store and protect personal data in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand. This policy applies to business contacts such as managers, project directors, fund managers and other contact persons at organisations with whom we interact.
1. Controller / Who we are
"We", "us" or "our" refers to the company operating this website and conducting business communications. We are the data controller for the personal data processed under this policy.
2. Definitions
• Personal data — any information that identifies an individual (for example: name, email address, phone number).
• Sensitive personal data — special categories (health, race, religion, etc.) which we do not collect in this contact process.
• Processing — any operation performed on personal data (collection, storage, use, sharing, deletion).
3. Personal data we collect
We collect only the minimum information necessary for business contact and coordination:
• Full name (name and surname)
• Job title / position / company (if supplied)
• Work email address (mandatory for contact)
• Work phone number (optional, if provided)
We do not collect national ID numbers, home addresses, health data, or other sensitive personal data as part of the contact form process.
4. How we collect personal data
We obtain personal data by:
• Directly from you when you submit our website contact form or email us;
• From public sources (company websites, public directories, LinkedIn, press releases);
• From professional introductions, referrals or meetings.
We document the source of data when we collect it from public sources.
5. Purpose of processing & lawful basis
Purposes
We process personal data for purposes including:
• Responding to enquiries and requests;
• Establishing, maintaining or managing business relationships;
• Scheduling meetings, calls or site visits;
• Sharing relevant business information and updates;
• Record keeping for legitimate business purposes.
Lawful basis
We rely primarily on legitimate interest as the lawful basis for processing (i.e., our legitimate interest in communicating with relevant business contacts). Where required (for example, subscription to marketing lists), we will obtain consent explicitly. If processing is necessary to perform or negotiate a contract, we may rely on performance of contract as an additional basis.
6. Use of automated decision-making / profiling
We do not perform automated decision-making or profiling based solely on the contact data collected via the contact form.
7. Disclosure and recipients
We will not sell or rent your personal data. We may disclose or share personal data only in limited circumstances:
• With our service providers who process data on our behalf (e.g., email providers, CRM, hosting providers). These parties are bound by contract to protect data and act only on our instructions;
• If required by law, court order or competent authority;
• To enforce our rights or to protect the rights, property or safety of our business or others.
Before engaging any service provider we assess their ability to protect data and put contractual safeguards in place (data processing agreement / confidentiality clause).
8. International transfers
Personal data may be stored or processed on servers located outside Thailand (for example, hosted cloud or email services). Where we transfer data abroad, we will ensure appropriate safeguards are in place to protect that personal data in accordance with PDPA requirements.
9. Data retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy or to meet legal or regulatory requirements.
Typical retention period for business contact information is until the business relationship ends plus a reasonable period for record keeping (for practical purposes many businesses use 1−3 years from the last contact), unless you request deletion earlier. When data is no longer required we will securely delete or anonymize it.
10. Security measures
We implement reasonable organisational and technical measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. Measures include access controls, password protection, role-based access, data backups, and encrypted communications where appropriate. Access to contact lists and CRM is restricted to authorized personnel only.
11. Your rights under PDPA
Under PDPA you have the right to:
• Request confirmation whether we process your personal data and request access to it;
• Request correction or update of inaccurate or incomplete data;
• Request deletion or anonymisation of data where lawful;
• Object to or restrict processing in certain cases;
• Withdraw consent where we processed data on the basis of consent (withdrawal does not affect processing before withdrawal);
• Lodge a complaint with the relevant supervisory authority.
12. How to exercise your rights
To exercise any rights, contact us at:
PDPA Contact:
office@bayview.asia
Subject line: "PDPA Inquiry"
Please include: (1) your full name; (2) the email address or other contact information you used with us; (3) a clear description of the request (access, correction, deletion, objection, etc.). We may ask for reasonable proof of identity before acting on a request to protect against unauthorized disclosures. We will acknowledge receipt and respond without undue delay and in accordance with applicable legal requirements.
13. Complaints and supervisory authority
If you are not satisfied with our response, you may escalate your complaint to the competent supervisory authority in Thailand as provided under PDPA. You may also contact us first at the PDPA contact above to try to resolve the issue.
14. Children
This contact process is intended for business contacts and professionals. We do not knowingly collect personal data from children.
15. Changes to this policy
We may update this Privacy Policy periodically to reflect changes in legal or business requirements. We will publish the updated policy on our website and update the "Last updated" date.
16. Governing law
This policy is governed by the laws of Thailand.