Privacy Policy

1. Introduction

Annuora Co., Ltd. ("Annuora", "we", "us", or "our") is committed to handling personal data responsibly. This Privacy Policy explains what personal information we collect, how we use it, and the rights you have in relation to your data. It applies to all individuals who use our website at annuorax.pro and to anyone who engages with our services.

We operate under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and process data only for the purposes described below. If you have questions, contact us at [email protected].

2. What Personal Data We Collect

We collect only the information needed to provide our services and respond to enquiries:

• Contact information — name, email address, and phone number provided through our enquiry form.
• Message content — any information you include in your enquiry message.
• Usage data — if you accept analytics cookies, we collect anonymised information about how pages are accessed (page views, time on page, referral source).
• Documents brought to sessions — during a Document Index session, you may bring personal retirement paperwork. We review these during the session only; we do not copy, photograph, or retain them.

3. How We Use Your Data

We use the data we collect for the following purposes:

• To respond to your enquiry and provide the service you have requested.
• To follow up on a service engagement (such as a post-session email question).
• To send you information you have specifically requested about our services.
• To improve our website and services using aggregated, anonymised analytics data.

We do not use your data for direct marketing without your explicit consent. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Legal Basis for Processing

Under Thailand's PDPA, we process your personal data on the following lawful bases: consent (for optional analytics cookies and marketing communications); contract (to fulfil the service you have engaged us for); and legitimate interest (to respond to enquiries and maintain basic service records). Where we rely on consent, you may withdraw it at any time without affecting any processing already carried out.

5. Data Retention

We retain contact and enquiry data for up to 24 months from the date of your last interaction with us, after which it is securely deleted. Analytics data is aggregated and anonymised; it is not linked to identifiable individuals and is retained for up to 26 months in line with standard analytics practice. Documents you bring to sessions are not retained after the session ends.

6. Cookies

Our website uses cookies to function and, where you consent, to collect anonymised usage data. See our Cookie Policy for full details of the cookies used, their purpose, and how to manage your preferences.

7. Data Protection Measures

We take reasonable technical and organisational measures to protect the personal data we hold, including encrypted data transmission (HTTPS), access restrictions on internal systems, and regular review of our data handling practices. No internet transmission is entirely without risk, but we take the protection of your information seriously.

8. Third-Party Services

We may use third-party services to support our website, including analytics providers. Where we do, we ensure these providers handle data in accordance with applicable data protection laws. Our website may contain links to external sites — we are not responsible for their privacy practices and encourage you to review them independently.

9. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your personal data in certain circumstances
• Object to or restrict certain processing activities
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our services are intended for adults of working age and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently received such data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of the page. We encourage you to review this policy periodically. Continued use of our website following any update constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at: