Privacy Policy

This Privacy Policy describes how Northmere ("we", "us", "our") handles personal information collected through our website at northmerex.biz. We take data handling seriously and aim to be clear about what we collect, why we collect it, and how it is used.

1. Data Controller

The data controller for personal information collected through this website is:

Northmere
23 Nimmanhaemin Road, Suthep, Chiang Mai 50200, Thailand
Email: [email protected]
Phone: +66 53 218 470

2. Data We Collect

We collect personal information in the following situations:

• Contact form submissions. When you submit our contact form, we collect the name, email address, and any other information you choose to include in your message.
• Direct email or telephone contact. If you contact us directly by email or phone, we may retain a record of that communication.
• Website usage data. Our website server may log basic technical information such as IP address, browser type, referring URL, and pages visited. This data is collected in aggregate and is not used to identify individuals.
• Cookies. We use a small number of functional cookies to support basic website operation. See Section 7 for details.

We do not collect sensitive personal data (such as financial account details, health information, or government identification numbers) through this website.

3. Purpose and Legal Basis

We process personal information for the following purposes and on the following legal bases:

• Responding to enquiries (legal basis: legitimate interest / contract performance). When you submit a contact form or email us, we use your information to respond to your message and discuss your enquiry.
• Service delivery (legal basis: contract performance). If you proceed to engage our services, we use the information you provide to deliver the advisory work agreed.
• Record-keeping and compliance (legal basis: legal obligation). We retain records as required under applicable Thai law and for the administration of our business.
• Improving our website (legal basis: legitimate interest). Aggregated technical log data helps us understand how the website is used and make improvements.

We do not use your personal information for unsolicited direct marketing without your explicit agreement, and we do not sell personal data to third parties.

4. Retention

We retain personal information only for as long as necessary for the purposes described in this policy or as required by applicable law:

• Enquiry records (contact form submissions, email correspondence) are retained for up to three years from the date of last contact, unless an ongoing engagement requires longer retention.
• Engagement records (documents, written deliverables, correspondence relating to a paid engagement) are retained for seven years in line with standard commercial record-keeping practice.
• Technical log data is retained for up to 90 days and then deleted or anonymised.

After the applicable retention period, personal data is securely deleted or rendered permanently non-identifiable.

5. Sharing of Personal Information

We do not sell, rent, or trade personal information. We may share information with the following categories of recipient only to the extent necessary:

• Service providers. We use third-party services for email, website hosting, and business administration. These providers process data on our behalf under appropriate contractual terms.
• Professional advisors. Accountants, legal advisors, or auditors may access records in the course of their professional duties, subject to confidentiality obligations.
• Legal or regulatory requirements. We may disclose information where required to do so by applicable law, court order, or regulatory authority.

Any third-party service providers we engage are selected with care and are required to maintain appropriate data protection standards.

6. International Transfers

Our primary operations are based in Thailand. Some of the third-party service providers we use may process data in other countries. Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place, consistent with applicable data protection law.

7. Cookies

Our website uses a small number of cookies. A cookie is a small text file placed on your device by a website. We use the following types:

• Functional cookies. These are necessary for the website to operate correctly, such as remembering your cookie consent preference. They do not track your activity across other websites.

We do not currently use advertising or behavioural tracking cookies. For more detail, please read our Cookie Policy.

You can control and delete cookies through your browser settings. Disabling functional cookies may affect the operation of the website.

8. Your Rights

Depending on the law applicable to your situation, you may have some or all of the following rights in relation to the personal information we hold about you:

• Right of access. You may request a copy of the personal information we hold about you.
• Right to rectification. You may ask us to correct inaccurate or incomplete information.
• Right to erasure. You may request that we delete your personal information, subject to any legal obligations we have to retain it.
• Right to restrict processing. You may ask us to limit the ways in which we use your information in certain circumstances.
• Right to object. You may object to processing carried out on the basis of legitimate interest.
• Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may request a copy in a portable format.

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable timeframe and in accordance with applicable law. We do not charge a fee for straightforward requests.

9. Security

We take reasonable steps to protect personal information from unauthorised access, disclosure, alteration, or loss. These steps include using encrypted communications where appropriate, limiting access to personal data to team members who require it, and working with service providers who maintain appropriate security standards.

No method of transmission over the internet or electronic storage is entirely without risk. While we take data security seriously, we cannot provide an absolute assurance of security in all circumstances.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website following any update constitutes your acknowledgement of the revised policy.

11. Contact

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

Northmere
23 Nimmanhaemin Road, Suthep, Chiang Mai 50200, Thailand
Email: [email protected]
Phone: +66 53 218 470
Office hours: Monday–Friday, 09:00–17:30 ICT (UTC+7)