Privacy Policy

Last Updated: 7 April 2025 | Sparxia Co., Ltd. — Bangkok, Thailand

1. Introduction

Sparxia Co., Ltd. ("Sparxia", "we", "us") is committed to handling personal data with care and transparency. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have in relation to it.

This policy applies to data collected through our website at sparxia.pro, through contact forms, and in the course of our advisory engagement services. It should be read alongside our Cookie Policy and Terms & Conditions.

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

2.1 Information you provide directly

Name and email address (from contact forms and engagement enquiries)
Phone number (if provided voluntarily)
Company name, role, and description of your situation (from contact messages)
Documents you share with us as part of an advisory engagement (covered separately in engagement agreements)

2.2 Information collected automatically

IP address and browser type (via server logs)
Pages visited and time spent on site (via analytics cookies, if accepted)
Cookie preferences stored in your browser's local storage

2.3 Legal basis for processing (Thailand PDPA)

We process personal data on the following legal bases under Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

Consent — for marketing communications and non-essential cookies, where you have provided explicit consent
Contract performance — for data necessary to deliver advisory services you have engaged
Legitimate interests — for website analytics and improving our services, where this does not override your rights

2.4 Retention periods

Contact form enquiries: 24 months from date of submission
Engagement data (documents, communications): duration of engagement plus 36 months
Analytics data: 26 months (standard retention)
Cookie consent records: 12 months

3. How We Use Your Data

To respond to your enquiries and arrange advisory engagements
To deliver agreed advisory services and provide written outputs
To send administrative communications about your engagement (schedule changes, document requests)
To improve our website and services through anonymised analytics
To comply with legal obligations under Thai law

We do not sell, rent, or trade your personal data. We do not use your data for behavioural advertising.

3.1 Third-party processors

We may share data with the following service providers, who are contractually bound to protect it:

Email and communication providers (for sending and receiving messages)
Analytics providers (if analytics cookies are accepted — data is anonymised)
Cloud document storage (for engagement documents, with access limited to the relevant advisor)

4. Data Protection Measures

All data transmitted via our website uses TLS/HTTPS encryption
Engagement documents are stored in access-controlled environments
Access to personal data is limited to staff directly involved in the relevant engagement
In the event of a data breach that poses risk to your rights, we will notify you and the relevant authority within 72 hours of becoming aware

5. Cookies

We use cookies to understand how our website is used and to remember your preferences. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies cannot be disabled as they are required for the site to function.

6. Your Rights

Under Thailand's PDPA, you have the following rights regarding your personal data:

Right to access — to request a copy of your personal data we hold
Right to rectification — to request correction of inaccurate data
Right to erasure — to request deletion of your data (subject to legal retention obligations)
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests
Right to withdraw consent — at any time, for processing based on consent (this does not affect prior processing)
Right to lodge a complaint — with the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

8. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under 18. If we become aware that we have done so, we will delete the data promptly.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via a notice on our website. The date at the top of this page reflects the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.

10. Contact

Data controller: Sparxia Co., Ltd.
56 Phra Ram 9 Road, Khwaeng Huai Khwang, Khet Huai Khwang, Bangkok 10310, Thailand
Email: [email protected]
Phone: +66 2 5731 8462