Privacy Policy

1. Introduction

Pinepath ("we", "us", "our") operates as a retail and franchise advisory practice based in Bangkok, Thailand. We take the handling of personal data seriously and are committed to being transparent about what we collect, why we collect it and how long we keep it.

This Privacy Policy applies to personal data collected through our website at pinepathx.world and in connection with our advisory services. It is written in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

2. Data We Collect

2.1 Information you provide directly

• Name and business name (when completing our contact form)
• Email address (required for responding to enquiries)
• Phone number (optional, if provided)
• Message content describing your store or situation

2.2 Information collected automatically

• Browser type and device information
• Pages visited and time spent on the site
• Referring URL (where you came from before visiting)
• IP address (anonymised where analytics are used)

2.3 Legal basis for processing

• Consent — analytics cookies and marketing, where you have opted in
• Legitimate interest — responding to enquiries submitted through the contact form
• Contract performance — managing ongoing advisory engagements

3. How We Use Your Data

• To respond to your enquiry and discuss whether our services suit your situation
• To manage and deliver advisory engagements you have engaged us for
• To send relevant follow-up information where you have requested it
• To understand how our website is used and improve its content
• To comply with applicable Thai law and regulatory requirements

We do not sell personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected:

• Contact form enquiries not resulting in an engagement: deleted within 6 months
• Engagement records (active clients): retained for the duration of the engagement plus 3 years
• Accounting and invoicing records: retained for 5 years in accordance with Thai accounting requirements
• Website analytics data: retained for up to 14 months in aggregated form

5. Data Protection Measures

• Our website uses HTTPS encryption for all data in transit
• Contact form data is transmitted securely to our internal systems
• Access to personal data is limited to Pinepath team members who need it for their work
• We do not store payment card details — payments are handled through separate secure invoicing systems
• In the event of a data breach affecting your personal information, we will notify you within a reasonable timeframe as required by the PDPA

6. Cookies

We use cookies to improve your experience on our website. Essential cookies are necessary for the site to function and cannot be disabled. Optional cookies for analytics and preferences require your consent.

For full details on the cookies we use and how to manage them, please read our Cookie Policy.

7. Third-Party Services

We may use the following third-party services on our website:

• Google Analytics — website usage statistics (anonymised)
• Google Maps — embedded location map (governed by Google's privacy policy)
• Font and CDN providers — Google Fonts and Cloudflare for site assets

Each third-party provider has their own privacy policy. We are not responsible for the data practices of these services beyond our selection of them.

8. Your Rights Under Thai PDPA

If you are a data subject under Thailand's Personal Data Protection Act, you have the following rights:

• Right to access — request a copy of personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data (subject to legal retention requirements)
• Right to data portability — receive your data in a structured, commonly used format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing
• Right to lodge a complaint — with Thailand's Personal Data Protection Committee (PDPC) at pdpc.or.th

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. External Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any site you visit.

10. Children's Privacy

Our services are directed at business owners and operators aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be published on this page with a revised "Last Updated" date. Continued use of our website after an update constitutes acceptance of the revised policy.

12. Contact for Data Enquiries

Data Controller: Pinepath

88 Phahonyothin Road, Chatuchak, Bangkok 10900, Thailand

[email protected]

+66 2 270 6193