Privacy Policy

Cornerstead ("we", "us", "our") is committed to handling personal information responsibly and transparently. This policy explains what information we collect, how we use it, how long we keep it, and what rights you have as someone whose information we hold.

If you have questions about anything in this policy, you can contact us at [email protected] or by phone at +66 75 318 4602.

1. Who We Are

Cornerstead is a retirement information and records organisation service based at 27 Thanon Ratchadamnoen, Phra Borommathat, Mueang Nakhon Si Thammarat, Nakhon Si Thammarat 80000, Thailand. We are the data controller for personal information collected through our services and website.

2. What Personal Data We Collect

We collect personal information in the following ways:

a. Through our website contact form

• Full name (required)
• Email address (required)
• Phone number (optional)
• Message content (optional)

b. Through service delivery

• Name and contact details for appointment scheduling
• Details you share during support circle sessions (which are not recorded or stored without your explicit consent)
• Document categories viewed during filing appointments (not document contents)

c. Through cookies and website analytics

• Browser type, device, and approximate location (via analytics cookies, only if consented)
• Pages visited and session duration

3. Legal Basis for Processing

We process your personal data on the following bases under the Personal Data Protection Act B.E. 2562 (Thailand):

• Contract: to fulfil a service you have requested or enquired about
• Legitimate interest: to respond to enquiries and manage our business operations
• Consent: for analytics cookies and any optional communications you opt into

4. How We Use Your Data

• To respond to enquiries and schedule appointments
• To deliver the service or guide you have requested
• To send follow-up information you have requested
• To improve our website and service offerings (aggregated, anonymised analytics data only)
• To comply with legal obligations if required

We do not use your data for direct marketing without your explicit opt-in, and we do not sell personal data to any third party.

5. Data Retention

• Contact form submissions: retained for up to 12 months, then deleted
• Service records (scheduling, notes): retained for up to 2 years from last interaction, then deleted
• Analytics data: retained for up to 26 months in aggregated form

6. Data Sharing

We do not share personal data with outside organisations except in the following limited circumstances:

• With service providers who process data on our behalf (e.g. hosting, analytics), under data processing agreements
• Where required by law or lawful authority

All third-party processors are required to handle data securely and only for the purpose specified.

7. Data Protection Measures

• Website data is transmitted over encrypted HTTPS connections
• Access to personal data is restricted to staff who need it to perform their role
• Paper records and notes are stored securely and disposed of appropriately
• We conduct periodic reviews of our data handling practices

8. Cookies

Our website uses cookies to support basic functionality and, with your consent, to analyse site usage. You can manage your cookie preferences at any time via our Cookie Policy page. Withdrawing consent for analytics cookies does not affect the functioning of the website.

9. Your Rights

Under applicable data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to processing based on legitimate interest
• Withdraw consent for any processing based on consent
• Request restriction of processing in certain circumstances
• Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our guides and website may include links to official government websites and public resources. We are not responsible for the privacy practices of those external sites. We recommend reviewing their individual privacy statements.

11. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data through our site, please contact us so we can delete it.

12. Changes to This Policy

If we make significant changes to this policy, we will update the "Last Updated" date at the top of this page. Continued use of our services after a change constitutes acceptance of the updated policy. We encourage you to check this page periodically.

13. Contact

For any questions relating to this Privacy Policy or your personal data:

• Email: [email protected]
• Phone: +66 75 318 4602
• Address: 27 Thanon Ratchadamnoen, Phra Borommathat, Mueang Nakhon Si Thammarat, Nakhon Si Thammarat 80000, Thailand