Privacy Policy

This policy applies to all personal data collected by Nava Jai through our website at navajaies, through our contact forms, and during the delivery of our services. It covers clients, website visitors, and individuals who contact us for information.

Nava Jai acts as the data controller for all personal data collected through these channels. Our registered address is 163 Asoke-Din Daeng Road, Din Daeng, Bangkok 10400, Thailand.

We collect personal data in the following categories:

• Contact information — name, email address, and phone number provided through our website enquiry form or direct correspondence.
• Professional details — organization name, job title, or role information you voluntarily share during an enquiry or engagement.
• Usage data — anonymized information about how visitors interact with our website, collected through analytics cookies (only with consent).
• Communication records — email and telephone correspondence related to enquiries or ongoing engagements.

We do not collect sensitive categories of personal data (such as health information, financial data, or political opinions) unless expressly required for a specific engagement and with your explicit consent.

We process personal data on the following legal bases under the PDPA:

• Consent — for marketing communications and analytics cookies, where you have given explicit consent.
• Contractual necessity — to deliver services you have engaged us to provide, including communicating with you about your engagement.
• Legitimate interest — for responding to enquiries, maintaining business records, and improving the quality of our services.
• Legal obligation — where we are required to retain or disclose data by Thai law.

We retain contact and enquiry data for up to 24 months from last contact. Engagement-related records are retained for up to 5 years to meet business and legal requirements. Analytics data is retained for up to 14 months.

• Responding to your enquiries and providing information about our services
• Delivering contracted services and maintaining engagement records
• Sending relevant updates about our services where you have given consent
• Improving our website and understanding how visitors use it (with analytics consent)
• Complying with legal and regulatory obligations under Thai law

We do not use your personal data for automated decision-making or profiling. We do not sell your personal data to third parties.

We share personal data only where necessary. Third parties who may receive limited data include:

• Website hosting and IT providers — for operating and maintaining our website and email systems, under data processing agreements.
• Analytics providers — where you have consented to analytics cookies, anonymized usage data may be processed by Google Analytics.
• Legal and professional advisors — where necessary for legal compliance, under confidentiality obligations.

We do not transfer personal data internationally except where a third-party provider operates servers outside Thailand and has appropriate safeguards in place (such as Standard Contractual Clauses or equivalent).

We apply appropriate technical and organizational measures to protect personal data, including encrypted data transmission (HTTPS), access controls limiting who can view personal data internally, regular security reviews of our systems and processes, and confidentiality agreements with staff and contractors.

In the event of a data breach that presents a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required under the PDPA.

Our website uses essential cookies (necessary for basic site function) and, with your consent, optional analytics and preference cookies. For full details about cookies we use and how to manage your preferences, please see our Cookie Policy.

Under Thailand's Personal Data Protection Act, you have the following rights in relation to your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data where there is no compelling reason to continue processing it
• Right to data portability — receive your data in a structured, commonly used format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent at any time where processing is consent-based, without affecting prior processing
• Right to lodge a complaint — with the Personal Data Protection Committee of Thailand if you believe your rights have been violated

To exercise any of these rights, please contact us at privacy@navajaies. We will respond within 30 days.

For any privacy-related questions, requests, or concerns:

Nava Jai
163 Asoke-Din Daeng Road, Din Daeng, Bangkok 10400, Thailand

Email: privacy@navajaies

Phone: +66 2 641 3758