Privacy Policy

1. Introduction

Suvarna Group ("we", "us", or "our") is an independent operations consulting practice registered and operating in Bangkok, Thailand. We are committed to handling the personal data of individuals who interact with our website or engage our services with care and in accordance with applicable data protection requirements.

This policy explains what personal data we collect, how we use it, the legal basis for our processing activities, and the rights available to individuals in connection with their data. It applies to information collected through our website at suvarnag.info and through our consulting engagement process.

If you have questions about this policy or wish to exercise any of your rights, please contact us at [email protected].

2. Personal Data We Collect

We collect personal data in the following ways:

2.1 Information you provide to us

When you submit the contact form on our website, you may provide your name, email address, phone number, and a description of your situation or enquiry. This information is used to respond to your message and, where appropriate, to discuss a potential engagement.

2.2 Information collected during engagements

During a consulting engagement, we may collect information about your organisation's operations, processes, and staff. Where this involves personal data about individuals (for example, names and roles of operating staff), that data is used solely for the purposes of the engagement and is treated as confidential.

2.3 Information collected automatically

When you visit our website, our servers may record your IP address, browser type, and the pages you visit. We may also use cookies and similar technologies. Please refer to our Cookie Policy for details.

2.4 Retention periods

Contact form submissions are retained for up to twelve months from the date of receipt, or for the duration of a resulting engagement plus twenty-four months, whichever is longer. Website analytics data is retained in accordance with the relevant service provider's terms.

3. How We Use Personal Data

We use personal data for the following purposes:

• To respond to enquiries submitted via our contact form
• To conduct and deliver consulting engagements you have engaged us for
• To communicate with you during and after an engagement
• To understand how our website is used and to improve it
• To comply with our legal obligations

We do not use personal data for automated decision-making. We do not sell or share personal data with third parties for their own marketing purposes.

4. Legal Basis for Processing

Our legal basis for processing personal data depends on the context:

• Consent: For optional cookies and analytics, where you have given consent via our cookie banner.
• Contractual necessity: For processing required to perform a consulting engagement you have engaged us for.
• Legitimate interests: For responding to enquiries and for basic website analytics that help us improve the site, where these interests are not overridden by your interests or fundamental rights.
• Legal obligation: Where we are required to retain or disclose data to comply with applicable law.

5. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data from unauthorised access, disclosure, or loss. These include:

• Use of HTTPS on our website
• Access controls limiting who within our practice can access client data
• Secure storage of engagement-related documents
• Confidentiality obligations for all practitioners involved in client work

In the event of a data breach that is likely to affect your rights, we will notify you and, where required by applicable law, the relevant supervisory authority, within the required timeframes.

6. Cookies

Our website uses cookies for basic functionality and, where you consent, for analytics purposes. Please see our Cookie Policy for full details of the cookies we use and how to manage your preferences.

7. Your Rights

Depending on your location and applicable law, you may have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you.
• Right to rectification: To ask us to correct inaccurate or incomplete data.
• Right to erasure: To request deletion of your personal data in certain circumstances.
• Right to data portability: To receive your data in a structured, commonly used format where technically feasible.
• Right to object: To object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please write to us at [email protected]. We will respond within thirty days.

If you are located in Thailand, you may also have rights under the Personal Data Protection Act B.E. 2562 (2019). If you are dissatisfied with how we handle your data, you may lodge a complaint with the Personal Data Protection Committee of Thailand.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

9. Children's Privacy

Our services are intended for business professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently done so, please contact us so we can delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Material changes will be communicated via a notice on our website. Continued use of our website after any changes constitutes acceptance of the updated policy.

11. Contact Us

For any questions about this policy or requests relating to your personal data: