Privacy Policy

1. Introduction

Nestera ("we", "us", "our") is committed to handling personal information responsibly and with care. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it.

This policy applies to all individuals who contact us, use our services, or visit our website at nestera.live. We operate under Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA).

2. Data We Collect

We collect only the personal data necessary to deliver our services and communicate with you:

• Contact information: Name, email address, and phone number provided through our enquiry form or direct contact.
• Engagement information: Details about the service you are enquiring about or have engaged.
• Documents (Records Digitization only): Physical or digital documents you provide for scanning and organization. These are used solely for service delivery and are not retained after the engagement closes.
• Website usage data: Anonymous analytics data collected via cookies (with your consent) including page views and session duration.

Legal basis: consent (enquiry form, cookies), contract performance (active service engagements), and legitimate interest (service quality and security).

3. How We Use Your Data

• To respond to your enquiry and discuss which service may be relevant
• To deliver the service you have engaged and communicate about its progress
• To issue invoices and maintain financial records as required by Thai law
• To improve our website and service quality through anonymous analytics
• To comply with legal obligations under Thai PDPA and related regulations

We do not use your personal data for direct marketing without your explicit consent, and we do not sell or share your data with third parties for commercial purposes.

4. Data Retention

5. Data Protection

We take appropriate technical and organizational measures to protect your personal data:

• Files transferred to clients via encrypted methods — not unprotected email attachments
• Working copies of scanned documents stored on password-protected systems during the engagement
• Access to personal data limited to staff directly involved in the relevant engagement
• In the event of a personal data breach that may affect your rights, we will notify you and the relevant Thai authority within 72 hours where required by law

6. Cookies

Our website uses cookies to maintain basic functionality and, with your consent, to understand how visitors use the site. For full details of cookie types and your choices, see our Cookie Policy.

You can manage your cookie preferences at any time through the Cookie Policy page or your browser settings.

7. Third Parties

We do not sell or rent personal data to third parties. We may share data with:

• Analytics providers (e.g. Google Analytics) — anonymized usage data only, with consent
• Payment processors — as required to complete invoicing
• Regulatory bodies — only when required by Thai law

Links on our website may lead to third-party sites. We are not responsible for the privacy practices of those sites.

8. Your Rights Under Thai PDPA

As a data subject under the Personal Data Protection Act B.E. 2562, you have the following rights:

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Personal Data Protection Committee of Thailand.

9. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18.

10. Policy Changes

We may update this policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. If we make material changes, we will notify active clients directly. Continued use of our services after an update constitutes acceptance of the revised policy.