Legal
Privacy Policy
Vellumark is committed to handling personal information with care and discretion. This policy explains what we collect, why we collect it, and how we keep it safe.
Last Updated: 12 May 2025 · Effective Date: 12 May 2025
1. Introduction
Vellumark ("we", "us", "our") is a document organisation and family archive service based at 7/21 Huay Kaew Road, Suthep, Chiang Mai 50200, Thailand. This Privacy Policy describes how we collect and handle personal information when you use our website or engage our services.
We follow the principles of Thailand's Personal Data Protection Act (PDPA) and handle your information with the same care and discretion that we bring to our archiving work. If you have any questions about this policy, please write to us at [email protected].
2. Data We Collect
We collect only the personal information that is genuinely necessary to provide our services and respond to enquiries.
Information You Give Us
- Your name and contact details (telephone number and email address)
- The contents of any message you send through our enquiry form
- Records or documents you share with us in the course of a service engagement
Information Collected Automatically
- Basic usage data such as pages visited and time spent (via analytics cookies, where consented)
- Technical data including browser type and approximate location by region
- Cookie preference choices stored in your browser's local storage
Legal Basis (PDPA)
We process contact information on the basis of your consent (by submitting the enquiry form) or on the basis of our legitimate interest in responding to service enquiries. Service-related document data is processed on the basis of the contract between us.
Retention: Enquiry contact details are held for up to 24 months from last contact. Documents and records provided as part of an active service engagement are retained only for the duration of that engagement and for a reasonable handover period of up to 60 days thereafter, unless you request earlier deletion.
3. How We Use Your Data
We use personal information only for the purposes set out below. We do not sell personal data to any third party.
-
To respond to your enquiry and discuss our services with you.
-
To carry out the document organisation or archiving work you have engaged us to do.
-
To send service-related communications such as appointment confirmations or follow-up notes, where you have requested them.
-
To understand how visitors use our website, in aggregate and anonymised form, so that we can improve it.
-
To comply with legal obligations under Thai law or other applicable legislation.
We do not use your personal data for automated decision-making or profiling.
4. Data Protection
We take reasonable and appropriate steps to keep your personal information safe. These steps include:
-
Encrypted transmission of data between your browser and our web server (HTTPS).
-
Restricted access to personal information — only team members who need it to carry out the relevant work may access it.
-
Secure storage of digital documents with access controls in place.
-
Regular internal reviews of the data we hold to ensure we are not keeping information longer than necessary.
In the unlikely event of a data incident affecting your personal information, we will notify you and the relevant authority as required by the PDPA and applicable guidance.
6. Your Rights
Under the Thailand Personal Data Protection Act, you have the following rights in relation to the personal information we hold about you:
Right of Access
You may ask us what personal information we hold about you and request a copy.
Right to Rectification
You may ask us to correct any inaccurate or incomplete personal information.
Right to Erasure
You may request that we delete your personal information, subject to any legal obligations we have to retain it.
Right to Portability
Where we process your data by automated means and on the basis of consent or contract, you may request a copy in a portable format.
Right to Object
You may object to processing based on our legitimate interests at any time.
Right to Withdraw Consent
Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days. You also have the right to raise a concern with the Office of the Personal Data Protection Committee (PDPC) of Thailand.
7. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before sharing any personal information with them.
8. Children's Privacy
Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us so that we can remove it promptly.
9. Policy Updates
We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website after a change is published constitutes acceptance of the revised policy.
10. Contact
For any questions about this policy, to exercise your rights, or to raise a concern about how we handle your personal information, please reach us at:
Vellumark — Data Controller
- 7/21 Huay Kaew Road, Suthep, Chiang Mai 50200, Thailand
- [email protected]
- +66 2 387 64 19