Privacy Policy

1. Data Controller Information

The data controller for personal information collected through this website and our services is:

• Business Name: Rai Nexus
• Address: 63 Srisoonthorn Road, Thalang, Phuket 83110, Thailand
• Phone: +66 76 318 742
• Email: privacy@rainexuvess

2. Information We Collect

We collect personal information that you provide directly to us and information generated through your use of our website:

Information you provide:

• Full name, email address, and phone number submitted via our contact form
• Messages and enquiries you send to us
• Information shared during consulting engagements, including business workflows, staff data, and operational details

Information collected automatically:

• IP address and browser type when you visit our website
• Pages viewed, time spent on the site, and referring pages (via analytics cookies, where consented)
• Cookie preferences stored locally in your browser

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent: For marketing emails and analytics cookies, where you have given explicit consent.
• Contractual necessity: For data required to deliver consulting services you have engaged us for.
• Legitimate interests: For responding to enquiries submitted through our website and improving our service quality.
• Legal obligation: Where processing is required to comply with Thai law or regulatory requirements.

4. How We Use Your Information

• To respond to enquiries submitted through our contact form
• To deliver consulting services and communicate about ongoing engagements
• To send service-related updates where you are an existing client
• To improve our website and understand how visitors engage with our content (analytics, with consent)
• To comply with legal and regulatory obligations applicable in Thailand

We do not sell personal information to third parties. We do not use your data for automated decision-making or profiling.

5. Data Sharing

We share personal information only in the following limited circumstances:

• Service providers: Trusted third-party tools used to operate our website and business (such as email hosting and analytics platforms). These providers are contractually bound to handle data securely.
• Legal requirements: If required by Thai law, court order, or regulatory authority.
• Business transfers: In the event of a merger or acquisition, your data may transfer to the successor entity under equivalent protections.

6. Data Retention

• Contact form enquiries: retained for up to 2 years unless you request earlier deletion
• Client engagement data: retained for 5 years following the end of an engagement for contractual and legal purposes
• Analytics data: retained in anonymized or aggregated form for up to 26 months
• Cookie consent records: retained for 12 months

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. These include:

• Encrypted transmission of data via HTTPS
• Access controls limiting data to named team members with a need to know
• Regular review of security practices and third-party service providers
• Formal confidentiality agreements with all staff and contractors

In the event of a data breach that is likely to affect your rights, we will notify you and the relevant Thai supervisory authority as required under the PDPA.

8. Cookie Information

Our website uses cookies to improve your experience and analyse traffic. You can manage your cookie preferences at any time. For full details of the cookies we use and how to control them, please see our Cookie Policy.

9. Your Rights Under Thai PDPA

As a data subject under Thai law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data where there is no longer a lawful basis to retain it.
• Restriction: Request that we limit how we process your data in certain circumstances.
• Data portability: Receive a copy of your data in a commonly used, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@rainexuvess. We will respond within 30 days. For complaints, you may also contact the Office of the Personal Data Protection Committee (PDPC) in Thailand.

10. Third-Party Links

Our website may contain links to external websites. Rai Nexus is not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external sites you visit.

11. Children's Privacy

Our services are intended for organizations and individuals aged 18 years and over. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.

12. International Transfers

Our primary operations and data storage are based in Thailand. If any personal data is transferred to service providers outside Thailand, we ensure appropriate safeguards are in place as required by the PDPA, including data processing agreements with equivalent protections.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website after any changes constitutes acceptance of the updated policy. For significant changes, we will take additional steps to notify affected users.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data:

• Email: privacy@rainexuvess
• Phone: +66 76 318 742
• Address: 63 Srisoonthorn Road, Thalang, Phuket 83110, Thailand