Privacy Policy — Saltgrove Business Consulting

Introduction

Saltgrove ("we", "us", "our") takes the handling of personal data seriously. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it.

This policy applies to data collected through our website at saltgrov.club and through our consulting engagement process. It does not apply to data handled by third-party services we may link to.

Questions about this policy may be directed to [email protected].

Data we collect

We collect personal data in the following circumstances:

Contact form submissions: name, email address, phone number (optional), and the content of any message you submit.
Email correspondence: name and email address, and the content of communications.
Engagement delivery: for clients who commission an engagement, we collect organisational information, names and contact details of relevant staff, and information shared during interviews and working sessions.
Website analytics: anonymous usage data via analytics cookies (if consent is given).

We do not collect sensitive personal data (health, financial, or government identity information) through our website or engagement process.

Legal basis for processing

We process personal data on the basis of: consent (for optional cookies and marketing communication), contract performance (for client engagements), legitimate interest (for responding to enquiries and maintaining business records), and legal obligation where applicable.

Retention periods

Contact enquiry data is retained for twelve months from the date of last contact. Engagement-related data is retained for three years from the completion of the engagement. Analytics data is retained as configured by the analytics service (typically 14 months).

How we use your data

To respond to enquiries submitted through the contact form or by email
To deliver consulting engagements for clients who commission them
To maintain records of business correspondence and engagement history
To improve the performance and usability of our website (with consent)
To comply with legal and regulatory obligations

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling. We do not share client engagement information with any other party without explicit consent.

Data protection measures

We use reasonable technical and organisational measures to protect the personal data we hold. These include access controls limiting data access to authorised staff, encrypted storage for digital records, and a process for identifying and responding to data incidents. In the event of a data breach affecting your personal data, we will notify you as required by applicable law.

Cookies

Our website uses cookies to support basic functionality and (with consent) to collect analytics data. You can manage your cookie preferences at any time via our Cookie Policy page, which includes a preference management tool. Essential cookies cannot be disabled as they are required for the site to function.

Your rights

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable data protection principles, you have the following rights in relation to personal data we hold about you:

Access: to request a copy of the personal data we hold about you.
Rectification: to request that inaccurate data is corrected.
Erasure: to request that personal data is deleted where there is no longer a lawful basis for holding it.
Portability: to receive data in a structured, commonly-used format where technically feasible.
Objection: to object to processing based on legitimate interest.
Withdrawal of consent: to withdraw consent at any time where processing is based on consent.
Complaint: to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Third-party links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies separately.

Children's privacy

Our services are directed at organisations and their leadership staff. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently done so, please contact us and we will delete the relevant data promptly.

Changes to this policy

We may update this policy from time to time. When we do, the "Last updated" date at the top of this page will change. Continued use of the website after an update constitutes acceptance of the revised policy.

10.

Contact

Data controller: Saltgrove
Address: 215 Sathon Tai Road, Sathon, Bangkok 10120, Thailand
Email for data enquiries: [email protected]
Phone: +66 2 538 9417