Privacy Policy

Scope and Application

This policy applies to all individuals who visit our website, submit enquiry forms, participate in our training programs, or otherwise interact with Aethonix's services. It covers personal data collected through our website and directly through consulting and training engagements.

Personal Data We Collect

We collect the following categories of personal data:

• Contact information: Name, email address, and telephone number — submitted via our enquiry form or provided directly during engagement scoping.
• Professional information: Job title, department, and organization name — relevant to scoping and delivering our services.
• Usage data: Standard server logs including IP address, browser type, pages visited, and visit duration — collected through our web hosting.
• Cookie data: Preference and analytics data stored locally. See our Cookie Policy for details.

How We Use Your Data

Personal data is used for the following purposes:

• Responding to enquiries and conducting initial scoping conversations
• Delivering training, audit, and pilot program services you have engaged us for
• Sending follow-up communications related to active or recently completed engagements
• Improving our website and understanding how it is used (analytics data only)
• Meeting legal and contractual obligations

We do not use personal data for marketing to third parties, and we do not sell or rent data to any party.

Legal Basis for Processing

Under the PDPA, we process personal data on the following bases: consent (where you have submitted a form or agreed to cookie use); contract performance (where data is necessary to deliver a service you have engaged us for); and legitimate interests (for website usage analytics, where these interests are not overridden by your rights).

Data Retention

Enquiry and contact data is retained for up to 24 months from last contact. Data related to completed engagements is retained for 5 years for contractual and accounting purposes. Website usage data is retained for up to 26 months. You may request deletion of your data at any time — see Section 08.

Data Sharing and Third Parties

Aethonix does not sell or share personal data with third parties for marketing purposes. We may share data with:

• Web hosting and infrastructure providers (data stored within our server environment)
• Analytics providers (aggregated, anonymized usage data only)
• Legal and accounting advisors where required by law

All third-party service providers are required to handle data in accordance with applicable Thai law and are subject to data processing agreements.

Data Security

We maintain appropriate technical and organizational measures to protect personal data from unauthorized access, disclosure, or loss. These include encrypted data transmission (HTTPS), restricted internal access, and regular review of our data handling processes. In the event of a data breach affecting your personal data, we will notify you in accordance with PDPA requirements.

Your Rights

Under the PDPA, you have the right to:

• Access — request a copy of personal data we hold about you
• Correction — request inaccurate data be corrected
• Erasure — request deletion of your data where there is no lawful basis for continued retention
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Cookies

Our website uses cookies for essential functionality and optional analytics. For full details of which cookies are used and how to manage them, please see our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites. Aethonix is not responsible for the privacy practices of those sites. We encourage you to review their privacy policies independently.

Children's Privacy

Aethonix's services are directed at professionals and organizations. We do not knowingly collect data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us promptly.

Policy Updates

This policy may be updated from time to time. Material changes will be noted on this page with a revised "Last Updated" date. Continued use of our website following an update constitutes acceptance of the revised policy.

Contact Information

For data-related questions or to exercise your rights, contact: