Privacy Policy

1. Data Controller

Orithen Co., Ltd., located at 47 Asoke-Din Daeng Road, Makkasan, Ratchathewi, Bangkok 10400, Thailand, is the data controller for personal data collected through this website and during service engagements. For data-related enquiries, contact: privacy@orithenena

2. Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, and phone number submitted via our contact form.
• Enquiry content: The message or description of your situation submitted through the form.
• Technical data: IP address, browser type, and pages visited, collected via analytics cookies (where consented).
• Engagement data: Organisational and operational information shared during service engagements, governed by a separate data processing agreement.

We do not collect sensitive personal data (such as health or financial records) through this website. Engagement data is handled under a separate NDA and data processing agreement, not this policy.

3. Legal Basis and Purpose of Processing

We process your personal data on the following legal bases under the PDPA:

• Consent: For analytics cookies and marketing communications, where you have explicitly opted in.
• Legitimate interests: For responding to enquiries and maintaining records of communications.
• Contractual necessity: For data processed during service engagements.

Your data is used to: respond to contact form submissions; provide the services you have engaged; improve the website based on aggregated usage data (if consented); and comply with legal obligations.

4. Data Retention

Contact form data is retained for up to 24 months from the date of submission, or until you request deletion. Engagement data retention periods are specified in the relevant data processing agreement. Analytics data (where consented) is retained for up to 14 months before being deleted or anonymised.

5. Data Sharing

We do not sell personal data. We may share data with:

• Service providers: Hosting infrastructure and analytics tools operating under data processing agreements.
• Legal authorities: Where required by applicable Thai law or a court order.

Client engagement data is never shared with or used for the benefit of other clients. Each engagement operates in an isolated data environment.

6. Data Protection Measures

We maintain the following security practices:

• Encrypted data transmission via HTTPS across all website interactions.
• Access controls limiting internal data access to personnel with a direct operational need.
• Isolated processing environments for all client engagement data.
• Regular internal review of data handling procedures.
• Data breach notification procedures in accordance with PDPA requirements.

7. Cookies

We use essential cookies to operate the website, and optional analytics cookies to understand how it is used. You can manage your cookie preferences at any time through our Cookie Policy page. We do not use advertising or tracking cookies that share data with third-party advertising networks.

8. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, and where applicable under GDPR, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent for analytics or marketing at any time without affecting prior processing.

To exercise any of these rights, contact: privacy@orithenena. We will respond within 30 days.

9. Third-Party Links

This website may link to external resources. Orithen is not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policies of any external sites you visit.

10. Children's Privacy

Our services are directed at organisations and individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor's data has been submitted in error, contact us at privacy@orithenena and we will delete it promptly.

11. Supervisory Authority

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand. For international users, appropriate supervisory authorities in your jurisdiction may also apply.

12. Policy Updates

We may update this policy to reflect changes in law or our practices. The "Last Updated" date at the top of this page will reflect any revisions. Continued use of our website following an update constitutes acceptance of the revised policy.

13. Contact

For any questions about this policy or your personal data:

• Email: privacy@orithenena
• Address: 47 Asoke-Din Daeng Road, Makkasan, Ratchathewi, Bangkok 10400, Thailand
• Phone: +66 2 641 5738