Privacy Policy — Nestwise

1. Introduction

Nestwise ("we", "us", "our") is committed to handling personal data responsibly and transparently. This policy explains what information we collect, why we collect it, how we use it, and what rights you have in relation to it. It applies to all personal data collected through our website at nestwise.sbs, through enquiry and booking forms, and in the course of delivering our services.

This policy is written in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA). Questions or requests relating to your personal data should be directed to [email protected].

2. Data Controller

Nestwise
99/18 Rama IX Road, Huai Khwang, Bangkok 10310, Thailand
Email: [email protected]
Phone: +66 2 118 4762

3. What Personal Data We Collect

Data you provide directly

Contact information: name, email address, phone number — collected via our enquiry and booking forms
Service correspondence: messages you send us describing your document situation or questions
Session-related information: scheduling preferences and any information you volunteer ahead of a session to help us prepare

Data collected automatically

Usage data: pages visited, time on site, referring URLs — collected via analytics tools if consent is given
Cookie data: stored in your browser subject to your cookie preferences (see our Cookie Policy)

We do not collect, copy, retain, or store any retirement documents or financial records you may bring to a session. All such materials remain entirely in your possession.

4. Legal Basis for Processing

Contract performance: processing your booking and delivering the service you have requested
Legitimate interests: responding to enquiries, managing session scheduling, improving our services
Consent: where you have explicitly agreed, such as for optional analytics cookies or marketing communications
Legal obligation: where processing is required to comply with applicable Thai law

5. How We Use Your Data

To respond to enquiries and provide the service you have requested
To schedule and confirm session appointments
To send session summaries and checklists after engagements
To improve our website and services through aggregated analytics
To comply with legal and regulatory obligations applicable in Thailand

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling.

6. Data Retention

Enquiry records: retained for 12 months from last contact, then deleted
Client session records (scheduling, summaries shared with you): retained for 24 months from end of engagement, then deleted
Analytics data: aggregated and anonymised; retained in aggregated form only
Cookie consent records: retained for 12 months

7. Data Sharing

We may share limited personal data with:

Email and scheduling service providers — to manage bookings and correspondence (processors bound by data processing agreements)
Analytics providers — aggregated, anonymised site data only, subject to your cookie consent
Authorities — only when required by law, court order, or government authority in Thailand

We do not share your data with any financial services, insurance, or regulated advice providers.

8. Cookies

Our website uses essential cookies necessary for basic site functionality, and optional cookies for analytics and preferences, subject to your consent. Full details are available in our Cookie Policy.

9. Data Security

Data is transmitted over encrypted HTTPS connections
Access to personal data is restricted to authorised team members only
Electronic records are stored on password-protected, access-controlled systems
In the event of a data breach affecting your rights or freedoms, we will notify you and the relevant authority within the timeframes required by the PDPA

10. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of your data where the legal basis no longer applies
Request restriction of processing in certain circumstances
Object to processing based on legitimate interests
Withdraw consent at any time (without affecting the lawfulness of prior processing)
Request portability of data you have provided to us
Lodge a complaint with the Personal Data Protection Committee of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11. International Transfers

We primarily process data within Thailand. If any data is transferred to service providers outside Thailand, we ensure adequate protections are in place consistent with PDPA requirements.

12. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. Please review their policies independently.

13. Age Restriction

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age. If you believe we have inadvertently received data from a minor, please contact us and we will delete it promptly.

14. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our website following a change constitutes acceptance of the revised policy.

15. Contact

For all privacy-related enquiries, requests, or complaints:
Email: [email protected]
Address: Nestwise, 99/18 Rama IX Road, Huai Khwang, Bangkok 10310