Privacy Policy

1. Introduction

Passalong ("we", "us", "our") is a record organisation and facilitation practice based at 138 Dibuk Road, Talat Yai, Mueang Phuket, Phuket 83000, Thailand. We take the privacy of our clients and website visitors seriously.

This Policy describes how we collect, use, and protect personal data in connection with our website and services. It applies to personal data we receive through our website contact form, by email, by phone, and during the course of our organisational sessions and facilitation programmes.

Questions about this Policy can be directed to [email protected].

2. Personal Data We Collect

We collect only the data needed to respond to enquiries and to deliver our services. This may include:

• Name and surname
• Email address
• Phone number (if provided)
• The content of messages sent through our contact form or by email
• Technical data collected automatically (IP address, browser type, pages visited) via cookies and analytics tools

Important: During sessions, clients may show or discuss personal records and documents. Passalong does not copy, photograph, scan, or retain any client documents. All records remain in the client's possession at all times.

Legal Basis for Processing

• Consent — for marketing communications and non-essential cookies (where applicable)
• Contract — to deliver the service you have requested
• Legitimate interests — to improve our website and respond to enquiries

Retention Periods

Enquiry and contact data is retained for up to 24 months. Service delivery records (session notes sent to clients) are not retained by Passalong. Website analytics data is retained in accordance with the relevant provider's policies.

3. How We Use Your Data

• To respond to enquiries submitted through our website or by email
• To arrange and deliver sessions, toolkits, or facilitation programmes you have requested
• To send follow-up correspondence related to your service
• To improve our website and service offering through anonymised analytics
• To comply with applicable law

We do not sell personal data to third parties. We do not use your data for profiling or automated decision-making.

4. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data against unauthorised access, loss, or misuse. These include:

• Encrypted storage for digital correspondence
• Access to client data restricted to Passalong team members with a direct need
• HTTPS encryption for data transmitted through our website
• No retention of physical client documents following sessions

In the event of a data breach affecting your personal data, we will notify you and any relevant supervisory authority as required by applicable law.

5. Cookies

Our website uses cookies to ensure basic functionality and to understand how visitors use the site. You can manage cookie preferences through our cookie banner or via your browser settings. For full details, see our Cookie Policy.

6. Your Rights

Subject to applicable law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data where there is no longer a lawful basis for retention
• Portability — request transfer of your data in a structured format
• Objection — object to processing based on legitimate interests
• Withdrawal of consent — where processing is consent-based, you may withdraw consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are dissatisfied with our response, you may lodge a complaint with the relevant data protection authority in your country of residence.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies before providing personal data.

8. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us so we can delete it.

9. Changes to This Policy

We may update this Policy from time to time. The updated version will be posted on this page with a revised date. Continued use of our website or services after any update constitutes acceptance of the revised Policy.

10. Contact

For privacy-related enquiries, please contact: