Privacy Policy

01 — Who we are

Verdulo is a sustainability and ESG advisory firm. We work with businesses in Thailand to design their sustainability reporting, conduct materiality readings, and facilitate climate risk workshops. Our advisory work is not licensed assurance or audit.

For the purposes of data protection, Verdulo is the data controller for personal information collected through this website and through our engagement process.

02 — Data we collect

We may collect personal information when you:

• Submit an enquiry through the contact form on our website
• Send us an email or call us directly
• Enter into an advisory engagement with us
• Participate in a workshop or interview we facilitate

The categories of data we may collect include:

• Name and job title
• Business name and address
• Email address and phone number
• Details you share in the body of an enquiry or during an engagement
• Website usage data collected automatically by analytics tools (see section 08)

We do not knowingly collect personal data from individuals under the age of eighteen.

03 — How we use your data

We use personal information for the following purposes:

• To respond to your enquiry and discuss whether and how we can assist
• To deliver the advisory engagement you have requested
• To send documents and written outputs that form part of our work together
• To maintain records of our engagements as required for business and accounting purposes
• To improve the quality of our website and services based on aggregated usage data

We do not use your personal data for unsolicited marketing, and we do not profile individuals for automated decision-making purposes.

04 — Legal basis for processing

We process personal data on the following legal bases under applicable Thai data protection law (PDPA) and, where relevant, the EU General Data Protection Regulation:

• Contract — where processing is necessary to perform an engagement you have entered into with us, or to take steps at your request prior to entering an engagement
• Legitimate interests — where we have a reasonable business interest in processing your data that is not overridden by your rights, such as responding to an unsolicited enquiry or improving our services
• Legal obligation — where processing is required to comply with Thai law, tax or accounting requirements
• Consent — where you have given us explicit permission, for example by accepting our cookie policy

05 — Data sharing

We do not sell, rent, or trade personal data. We may share information with:

• Service providers who support our website infrastructure, email delivery, or document storage — only to the extent necessary and under appropriate contractual safeguards
• Professional advisors such as accountants or legal advisors where necessary for business operations
• Regulatory authorities or law enforcement where we are legally required to do so

Where data is transferred to service providers based outside Thailand, we take reasonable steps to ensure that those transfers are subject to appropriate protections consistent with applicable law.

06 — Data retention

We retain personal data only for as long as is reasonably necessary for the purpose for which it was collected:

• Enquiries that do not result in an engagement: up to twelve months from initial contact
• Engagement records: up to seven years from the close of the engagement, consistent with Thai accounting and business record requirements
• Website analytics data: in aggregated, non-personally-identifiable form, retained at the discretion of the relevant analytics platform

You may at any time request earlier deletion of your data, subject to our obligations under applicable law.

07 — Your rights

Subject to applicable law, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Request deletion of your personal data in certain circumstances
• Object to or request restriction of certain types of processing
• Withdraw consent where our processing is based on your consent
• Lodge a complaint with the relevant data protection authority in Thailand

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable period and in accordance with applicable requirements.

08 — Cookies and website analytics

Our website uses cookies and similar technologies to understand how visitors interact with our pages. This may include tools such as Google Analytics. These tools may collect your IP address and browsing behaviour in aggregated or pseudonymised form.

You can manage cookie preferences through the cookie banner displayed on our website, or by adjusting your browser settings. Disabling certain cookies may affect the functionality of the site.

For full details of the cookies we use, please see our Cookie Policy.

09 — Contact us

If you have questions about this policy or about how we handle personal data, please reach out to us:

We may update this policy from time to time. The current version will always be available on this page, with the date of last update shown at the top.