Privacy Policy

1. Introduction

Oxbow Lane ("we", "us", "our") is a marketing operations consultancy registered in Bangkok, Thailand, with offices at 260 Sukhumvit Soi 55, Khlong Tan Nuea, Watthana, Bangkok 10110. This Privacy Policy describes how we collect, use, store and protect personal data in connection with our website and consulting services.

We are committed to handling personal information carefully and in line with the requirements of Thailand's Personal Data Protection Act B.E. 2562 (PDPA). By using our website or engaging our services, you acknowledge the practices described in this policy.

2. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: Name, email address and telephone number (phone is optional).
• Service engagements: Information you share during consulting sessions, including team structure, workflow descriptions and any documents provided for review.
• Website analytics: Anonymous usage data such as pages viewed, session duration and browser type, collected via analytics tools.
• Cookies: See Section 6 below and our Cookie Policy for details.

We do not collect sensitive personal data (such as health, financial or identity document data) as part of our standard services.

3. Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: Where you have submitted a contact form or accepted cookies that enable analytics or marketing tracking.
• Contractual necessity: Where data is required to deliver consulting services you have engaged us to provide.
• Legitimate interest: For internal business purposes such as improving our services and managing client relationships, where this interest does not outweigh your rights.

4. How We Use Personal Data

We use personal data collected for the following purposes:

• Responding to enquiries submitted via our contact form
• Scheduling and conducting consulting sessions
• Delivering written engagement outputs (summaries, guides, advisory notes)
• Communicating relevant updates about our services, where you have consented to receive these
• Maintaining records of engagement history for ongoing advisory clients
• Improving website content and user experience through aggregated analytics data

We do not use personal data for automated decision-making or profiling.

5. Data Sharing

We do not sell personal data to third parties. We share data only in the following limited circumstances:

• Service providers: Third-party tools used to operate our website (e.g. hosting providers, analytics platforms) who process data on our behalf under data processing agreements.
• Legal requirements: Where disclosure is required by law, court order or regulatory authority in Thailand.

Engagement materials shared by clients remain confidential and are not disclosed to any third party.

6. Cookies

Our website uses cookies to operate core functionality and, where you consent, to collect analytics data. You can manage your cookie preferences using the controls on our Cookie Policy page. Declining non-essential cookies does not affect your ability to access the website.

7. Data Retention

We retain personal data for the following periods:

• Contact form enquiries (non-clients): 12 months from the date of last contact.
• Client engagement data: 3 years from the end of the engagement, after which data is deleted or anonymised.
• Analytics data: Retained for up to 26 months in aggregated, anonymised form.

You may request earlier deletion of your personal data at any time (see Section 9).

8. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure or loss. These include password-protected systems, limited access controls and encrypted storage for client documents. In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authorities in line with applicable law.

9. Your Rights

Under Thailand's PDPA, you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you.
• Right to rectification: To request correction of inaccurate or incomplete data.
• Right to erasure: To request deletion of your personal data where it is no longer needed for the original purpose.
• Right to portability: To receive your personal data in a commonly used, machine-readable format.
• Right to object: To object to processing based on legitimate interest.
• Right to withdraw consent: To withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

11. Children's Privacy

Our services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have done so inadvertently, please contact us so we can delete the relevant data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our website or services after an update constitutes acceptance of the revised policy. For material changes, we will make reasonable efforts to notify existing clients directly.

13. Contact

For questions about this policy or to exercise your data rights:

• Email: [email protected]
• Address: Oxbow Lane, 260 Sukhumvit Soi 55, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand