Last updated: 21 August 2026
Data controller
Toolkit Stonebase controls personal data submitted through toolkitstonebase.click and related consulting correspondence. Contact: info@toolkitstonebase.click · Office 11, 57 Sample Avenue, Bangkok 00000 · +66 2 000 3290.
Data we collect
- Contact details you submit (name, email, message, optional service interest and scope notes)
- Technical logs such as IP address, browser type, and pages visited when essential or analytics cookies are active
- Engagement artefacts you voluntarily share during a paid consultation (interview notes, process samples)
We do not ask for passwords, payment card numbers, or national ID numbers through the public contact form.
Purposes
- Respond to scoping requests and schedule calls
- Deliver consulting work you commission
- Improve site reliability and, if you accept analytics cookies, understand aggregate traffic
- Meet legal and accounting obligations in Thailand
Retention
Inquiry messages are kept up to 24 months after the last correspondence unless a longer period is required for an active engagement or legal claim. Engagement records follow the retention period in the statement of work, typically up to seven years for accounting materials. Analytics data, when enabled, is retained in aggregate form according to the analytics provider settings described on the cookies page.
Your rights
Subject to Thai personal data protection law, you may request access, correction, deletion, or restriction of processing, and you may object to certain processing. To exercise rights, email info@toolkitstonebase.click. You may lodge a complaint with the relevant Thai supervisory authority.
International transfers
If a processor outside Thailand handles email or analytics, we take contractual and technical steps appropriate to the destination. Details of cookie providers appear on the cookies page.
Sharing
We share data with service providers who host email or site infrastructure, with professional advisers when required, and with authorities when Thai law requires disclosure. We do not sell personal data.
Security
We use access controls and encrypted transport for the public site. No method of transmission is perfectly secure; please avoid sending highly sensitive material through the contact form.
Children
The site and consulting services are directed at adults acting for organisations. We do not knowingly collect data from children.