Legal

Privacy Policy

Last Updated: 15 January 2026  |  Tessara Co., Ltd.

1. Data Controller

Tessara Co., Ltd. is the data controller for personal data collected through this website and our consulting engagements. Our registered address is 56 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand. For data-related inquiries, contact us at [email protected].

2. What Personal Data We Collect

We collect personal data that you provide directly to us, including:

• Name, email address, and phone number (when submitted via our contact form)
• Company name and role (when shared during engagement discussions)
• Business information shared during consulting engagements (treated as confidential commercial information)
• Website usage data collected through cookies and analytics tools

We do not collect sensitive personal data (as defined under PDPA) without explicit consent.

3. How We Collect Data

• Contact forms: When you submit an inquiry through our website
• Direct communication: Via phone, email, or in-person meetings
• Cookies and analytics: Automatically when you browse our website (see Section 6)
• Engagement participation: Information shared during consulting work

4. Legal Basis for Processing

We process personal data on the following legal bases under PDPA:

• Consent: For marketing communications and optional cookies
• Contract performance: When processing data necessary to fulfill a consulting engagement
• Legitimate interests: For website analytics and business development communications to existing contacts
• Legal obligation: Where required by Thai law

5. How We Use Your Data

• Responding to inquiries and scheduling consultations
• Delivering and managing consulting engagements
• Communicating progress, updates, and follow-up information
• Improving our website and service offerings
• Meeting legal or regulatory obligations

We do not use your data for automated decision-making with legal or similarly significant effects.

6. Cookies

Our website uses cookies to support basic functionality and understand how visitors interact with our content. Cookies fall into the following categories: essential (always active), analytics (optional), marketing (optional), and preference (optional). You can manage your cookie preferences at any time via our Cookie Policy page.

7. Data Sharing

We do not sell personal data. We may share data with trusted service providers (such as email and hosting providers) under data processing agreements. All third parties are required to handle data in compliance with applicable law. We do not share client engagement data with any third party without explicit consent.

8. Data Retention

• Contact form submissions: Up to 12 months from last interaction
• Consulting engagement records: Up to 5 years from engagement completion
• Analytics data: Up to 26 months
• Financial and contractual records: As required by Thai accounting and tax law (typically 5–7 years)

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure. These include access controls, encrypted communications, and regular security reviews. In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by PDPA.

10. Your Rights

Under PDPA, you have the following rights regarding your personal data:

• Right to access and receive a copy of your personal data
• Right to rectification of inaccurate or incomplete data
• Right to erasure ("right to be forgotten") in certain circumstances
• Right to restrict processing under certain conditions
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time (without affecting prior processing)
• Right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11. International Data Transfers

Where personal data is transferred outside Thailand (for example, via cloud-based service providers), we ensure appropriate safeguards are in place in accordance with PDPA requirements.

12. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

13. Children's Privacy

Our services are directed at business professionals and organizations. We do not knowingly collect data from individuals under the age of 18.

14. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via our website. Continued use of our services after updates constitutes acceptance of the revised policy.

15. Contact

For any questions or requests related to this policy or your personal data:

• Email: [email protected]
• Address: 56 Ratchadaphisek Road, Din Daeng, Bangkok 10400, Thailand
• Phone: +66 2 691 3827