Privacy Policy

1. Introduction

Trustmoor ("we", "us", "our") is committed to handling personal information carefully and transparently. This policy explains what data we collect, why we collect it, how we use it, and the rights available to people whose data we hold.

This policy applies to all personal data collected through our website at trustmoor.biz and through our service delivery activities. If you have questions, contact us at [email protected].

Trustmoor operates under Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA), which came into full effect in June 2022. Where clients are located in the European Union, we also observe the principles of the GDPR to the extent applicable.

2. What Personal Data We Collect

We collect only the data that is necessary for our services and communications:

• Contact information: name, email address, phone number (when provided via our contact form)
• Enquiry content: the message or description of need submitted through our website
• Usage data: standard web analytics data (pages visited, approximate location, browser type) collected via cookies with consent
• Business information (B2B clients): organisation name, contact details, and scope information relevant to an archive engagement

We do not collect sensitive personal data such as financial account details, identity document numbers, or health-related information through our website.

Data retention: Enquiry data is retained for twelve months from last contact. Client engagement records are retained for three years from completion, then securely deleted. Analytics data is retained in aggregate form only.

3. How We Collect Data

• Directly from you via the contact form on our website
• Via email or telephone when you contact us directly
• Through cookies and similar technologies when you browse our website (subject to your consent)

Legal basis for processing: We process personal data on the basis of your consent (for marketing and analytics), contract performance (for service delivery), and legitimate interest (for maintaining records of our communications).

4. How We Use Your Data

• Responding to enquiries and providing information about our services
• Delivering services you have booked or purchased
• Sending service-related communications (confirmations, reminders, follow-ups)
• Improving our website based on aggregate analytics data
• Complying with legal obligations where required

We do not use your personal data for automated decision-making or profiling. We do not sell personal data to third parties.

5. Data Sharing

We may share data with the following categories of third parties where necessary:

• Service providers: web hosting, email delivery, and analytics services that process data on our behalf under appropriate agreements
• Legal authorities: where required to comply with a legal obligation or court order under Thai law

We do not share your personal data with advertising networks, data brokers, or unrelated third parties.

6. Data Protection Measures

• Website served over HTTPS with TLS encryption
• Access to client data restricted to authorised Trustmoor staff only
• Internal access logs reviewed regularly
• Physical paper records held in locked storage at our Bangkok office
• In the event of a data breach affecting your personal data, we will notify you and the relevant authority within 72 hours of becoming aware, where required by law

7. Cookies

Our website uses cookies to function correctly and, with your consent, to collect analytics information. See our Cookie Policy for a full explanation of the cookies we use and how to manage your preferences.

8. Your Rights

Under the PDPA and, where applicable, the GDPR, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate data
• Erasure: request deletion of your data where there is no legitimate reason for us to retain it
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interest
• Withdrawal of consent: withdraw consent for analytics or marketing at any time
• Complaint: lodge a complaint with the Personal Data Protection Committee (PDPC) in Thailand, or with your local supervisory authority if you are in the EU

To exercise any right, email us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may link to external websites for reference purposes (for example, official Thai government sources). We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policies of any external sites you visit.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted personal data to us, please contact us at [email protected] and we will delete it promptly.

11. Policy Changes

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are material, we will communicate them to existing clients by email. Continued use of our website after the effective date of any changes constitutes acceptance of the revised policy.

12. Contact

For any questions or requests relating to this privacy policy or your personal data, contact us at: