Privacy Policy

Marrowbone Counsel ("we," "us," or "our") takes the privacy of individuals seriously. This policy describes how personal data is collected and handled through this website and in the course of our consulting work. We are committed to treating personal information with the same care and consideration we bring to every engagement.

This policy applies to visitors to our website, individuals who contact us through the enquiry form, and clients who enter into consulting engagements with us. By using this website, you acknowledge the practices described here.

Our operations are based in Thailand. This policy is informed by the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand, which governs the collection, use, and disclosure of personal data.

We collect personal data in two ways: directly, when you provide it through our contact form or in correspondence, and indirectly, through analytics tools as you use our website.

Information provided directly

• —Your name, to address correspondence appropriately
• —Your email address, for replies and follow-up
• —Your phone number, if provided in your message
• —The content of your message, to understand your enquiry
• —Additional information shared during an engagement, as relevant to the work

Information collected automatically

• —Pages visited and time spent on the site (via analytics)
• —Device type, browser, and operating system
• —Approximate geographic location (country or city level)
• —Referring pages and search terms, where available

Legal basis for processing

We process personal data on the following grounds:

• —Consent — for analytics and marketing cookies, which you can accept or decline
• —Legitimate interest — to respond to enquiries and improve our service
• —Contractual necessity — to fulfil our obligations under a consulting engagement

Personal data is used only for purposes consistent with why it was collected. We do not use personal information for purposes that would reasonably surprise the individuals concerned.

• —Responding to enquiries and conducting initial discussions about potential engagements
• —Delivering consulting services to clients who have engaged us
• —Sending relevant communications, such as updates about our services — with the option to opt out at any time
• —Understanding how this website is used, to improve it over time
• —Meeting legal and regulatory obligations as required

We do not sell personal data to third parties. We do not share it with advertisers or data brokers. Where third-party service providers process data on our behalf — such as analytics platforms or email infrastructure — they do so under contractual obligations that limit their use of that data.

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These measures include:

• —Encryption of data in transit via TLS/HTTPS
• —Restricted access to personal data, limited to those who need it for their work
• —Regular review of third-party services that handle data on our behalf
• —Secure disposal of data that is no longer needed

In the event of a data breach that poses a material risk to individuals, we will take appropriate steps to address the situation and, where required by law, notify affected individuals and relevant authorities.

This website uses cookies — small text files stored on your device — to support basic functionality and to understand how the site is used. Cookies we use include:

• —Essential cookies — required for the website to function correctly; these cannot be disabled
• —Analytics cookies — used to understand traffic patterns and improve the site
• —Preference cookies — used to remember your cookie consent choice

You can manage your cookie preferences at any time through our Cookie Policy page, which includes controls for each category.

Under the Personal Data Protection Act B.E. 2562 (Thailand), you have the following rights regarding your personal data:

To exercise any of these rights, please write to us at privacy@marrowbo. We will respond within a reasonable timeframe and in accordance with our obligations under Thai law. If you are not satisfied with our response, you may lodge a complaint with Thailand's Personal Data Protection Committee.

This website may contain links to external resources. We are not responsible for the privacy practices of those sites, and this policy does not extend to them. We encourage you to review the privacy policies of any external sites you visit.

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently received data from a minor, please contact us so we can address the matter.

We may revise this policy from time to time as our practices develop or as legal requirements change. When we make material changes, we will update the date at the top of this page. Continued use of the website after changes are posted constitutes acknowledgment of the updated policy.

If you have questions about this policy or how your data is handled, please reach out. We are glad to clarify.