Privacy Policy

1. Who We Are

Maven Drift ("we", "us", "our") is a change management advisory firm registered and operating in Thailand. Our registered office is at 168 Ratchadaphisek Road, Din Daeng, Bangkok 10400. We are the data controller for personal information processed in connection with our website and services.

For data-related queries, contact us at [email protected] or by telephone at +66 2 691 7350.

2. Personal Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, telephone number, and job title, provided when you use our contact form or communicate with us directly.
• Organisation information: Company name, sector, and general description of the change-related situation you share with us during advisory conversations.
• Website usage data: IP address, browser type, pages visited, and time on page — collected via analytics cookies where you have consented.
• Communications: Content of emails, written messages, and session notes related to your engagement with us.

We do not collect sensitive personal data (such as health, financial, or political information) unless it is directly relevant to an engagement and you have provided it explicitly.

3. How We Collect Data

• Directly from you via the website contact form
• Through email and telephone communication
• During advisory sessions and workshops
• Via cookies and website analytics (with your consent — see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data on the following legal bases under the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and applicable law:

• Consent: For marketing communications and non-essential cookies.
• Contractual necessity: To deliver advisory services you have engaged us to provide.
• Legitimate interests: To respond to enquiries, improve our services, and maintain records of completed engagements.
• Legal obligation: Where required by Thai law or regulatory requirements.

5. How We Use Personal Data

• To respond to your enquiry and assess whether we can assist
• To deliver contracted advisory services
• To produce written materials (summaries, plans, templates) as part of an engagement
• To maintain engagement records for quality and legal purposes
• To improve the content and usability of our website
• To send service updates where you have consented

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling.

6. Data Sharing

We do not share your personal data with external parties except in the following circumstances:

• Service providers: Where necessary, we share data with carefully selected service providers (such as secure cloud storage and email providers) who process data on our behalf under written agreements.
• Legal requirements: Where disclosure is required by Thai law, court order, or regulatory authority.

Any third-party service providers we use are required to maintain the confidentiality and security of your data.

7. Data Retention

We retain personal data only for as long as necessary:

• Enquiry records: 12 months from last contact if no engagement follows
• Engagement records: 5 years from the close of the engagement
• Financial records: As required by Thai accounting law (typically 5 years)
• Website analytics: Up to 14 months, depending on cookie consent

After these periods, data is securely deleted or anonymised.

8. Data Security

We take reasonable technical and organisational steps to protect personal data from unauthorised access, loss, or misuse. These include:

• Encrypted storage and transmission (HTTPS, encrypted cloud services)
• Access controls limiting data to staff who need it for their role
• Regular review of data handling practices
• Confidentiality agreements with all staff and contractors

In the event of a data breach that is likely to affect your rights, we will notify you and the relevant supervisory authority as required by the PDPA.

9. Cookies

Our website uses cookies to support basic functionality and, where you consent, to understand how visitors use the site. For full details of the cookies we use and how to manage your preferences, see our Cookie Policy.

10. Your Rights

Under Thailand's PDPA, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your data in certain circumstances.
• Restriction: Ask us to limit how we use your data in certain circumstances.
• Portability: Receive your data in a structured, readable format where technically feasible.
• Objection: Object to processing based on legitimate interests.
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent, without affecting earlier processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies independently.

12. Children's Privacy

Our services are directed at organisations and business professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data through our website, please contact us and we will delete it promptly.

13. Policy Updates

We may update this policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page will reflect when changes were made. Material changes will be communicated through our website or directly to affected individuals where appropriate.

14. Contact for Data Enquiries

Maven Drift
168 Ratchadaphisek Road, Din Daeng, Bangkok 10400
Email: [email protected]
Phone: +66 2 691 7350