Privacy Policy

Effective Date: 1 January 2025  |  Last Updated: 1 January 2025

This Privacy Policy describes how Relocation Network (legal name: FIDELIS LIGHTHOUSE LLC, hereinafter referred to as "we", "us", or "our") collects, uses, stores, discloses, and protects personal data obtained through the website tomorrowthailand.net (the "Website") and any related services we provide.

We are committed to safeguarding the privacy and personal data of all individuals who interact with our Website, in full compliance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA"), as well as any other applicable data protection regulations. Please read this Policy carefully before submitting any personal information through our Website.

By accessing or using our Website, submitting a contact form, or otherwise engaging with our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

1. Who We Are

Relocation Network operates under the legal entity FIDELIS LIGHTHOUSE LLC. We provide relocation-related information, guidance, and network services for individuals and families relocating to Thailand. Our registered address is:

For all matters relating to personal data and privacy, including exercising your rights under the PDPA, please contact us at the details above.

2. Personal Data We Collect

We collect personal data only to the extent necessary to deliver our services and respond to your enquiries. The categories of personal data we may collect include:

2.1 Data You Provide Directly

When you complete and submit our contact form, we collect the following information:

• Full Name — to address you correctly and personalise our response.
• Email Address — to reply to your enquiry electronically.
• Phone Number — to contact you by telephone where appropriate or requested.
• Message Content — the details of your enquiry, relocation needs, questions, or any other information you voluntarily include in the message body.

Providing this information is entirely voluntary. However, if you choose not to provide certain data (such as your email address), we may be unable to respond to your enquiry or deliver the service you have requested.

2.2 Data Collected Automatically

When you visit our Website, certain technical data may be collected automatically by our servers or third-party tools, including:

• IP Address — for security purposes and to understand approximate geographic location.
• Browser Type and Version — to optimise Website performance and compatibility.
• Operating System — for diagnostic and analytical purposes.
• Pages Visited and Navigation Paths — to understand how users interact with our Website.
• Date and Time of Access — for server log and security monitoring.
• Referring URL — to understand how users arrive at our Website.

This technical data is generally non-identifying on its own. However, in certain circumstances it may constitute personal data under the PDPA when combined with other information.

2.3 Sensitive Personal Data

We do not intentionally collect or process any sensitive personal data as defined under Section 26 of the PDPA (such as racial origin, political opinions, religious beliefs, health data, biometric data, or criminal records). Please do not include any sensitive personal data in any messages or enquiries submitted to us. If you inadvertently provide such information, we will delete it as soon as we become aware of it.

3. How We Use Your Personal Data

We process your personal data only for lawful purposes and on the basis of the legal grounds set out in the PDPA. The purposes for which we use your data include:

• Responding to Enquiries: To read, assess, and respond to the enquiries or requests you submit through our contact form, including providing relocation advice, service information, or referrals.
• Service Delivery: To deliver the relocation network services and information you have requested.
• Communication: To follow up on your enquiry via email or telephone as required or as consented by you.
• Record-Keeping: To maintain internal records of enquiries and correspondence for operational and compliance purposes.
• Website Improvement: To analyse aggregate, anonymised usage data to improve the Website's content, structure, and user experience.
• Legal Compliance: To comply with our legal obligations under Thai law and any applicable regulations.
• Security: To detect, prevent, and respond to fraud, abuse, or other security incidents affecting our Website or services.

We rely on the following legal bases for processing under the PDPA:

• Consent (Section 19, PDPA): Where you have provided explicit, informed consent — for example, by completing and submitting our contact form or agreeing to optional analytics cookies.
• Contractual Necessity: Where processing is necessary to take steps at your request prior to entering a service arrangement.
• Legitimate Interests: Where we have a legitimate interest in processing your data (such as maintaining Website security), provided that interest is not overridden by your rights and freedoms.
• Legal Obligation: Where we are required by law to process or retain certain information.

4. Contact Form Submissions — How They Are Processed

When you complete and submit our Website contact form, the following process occurs:

1. The form data (name, email, phone, message) is transmitted securely over an encrypted HTTPS connection to our web server.
2. The submission is processed by our server-side script, which formats the information and delivers it by email to our designated inbox.
3. The submitted data may be temporarily stored in server logs for a brief period for security and diagnostic purposes.
4. Our team reviews the enquiry and responds via the email address or telephone number you have provided.
5. Records of enquiries are retained in our email system and/or internal records in accordance with our data retention policy (see Section 8).

We do not sell, rent, or trade contact form data with third parties for marketing purposes. Your information is used solely to respond to and manage your enquiry.

5. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies. A cookie is a small text file placed on your device when you visit a website. Cookies help websites function properly, improve performance, and provide analytical insights.

5.1 Types of Cookies We Use

• Strictly Necessary / Functional Cookies: These cookies are essential for the Website to operate correctly. They enable core functions such as page navigation, form submission security (e.g., CSRF protection tokens), and session management. These cookies cannot be disabled without impairing the functionality of the Website. No consent is required for strictly necessary cookies under applicable law.
• Analytics Cookies (Optional): With your consent, we may use analytics cookies to collect anonymised data about how visitors use the Website — such as which pages are visited most frequently, how long visitors spend on each page, and how they navigate between pages. This information helps us improve the Website's content and user experience. Analytics cookies are only activated if you accept them through our cookie consent mechanism.

5.2 Managing Cookies

You can control and manage cookies through your web browser settings. Most modern browsers allow you to:

• View the cookies stored on your device.
• Delete cookies individually or in bulk.
• Block cookies from specific websites or all websites.
• Receive a notification when a cookie is about to be set.

Please note that blocking or deleting functional cookies may affect the performance and functionality of our Website. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

For more information about cookies generally, please visit www.allaboutcookies.org.

6. Third-Party Services and Integrations

Our Website may use services provided by third parties that could, in the course of delivering their functionality, process certain data relating to your visit. These include:

6.1 Google Fonts

Our Website may load font files from Google Fonts, a service provided by Google LLC (or Google Ireland Limited for users in the European Economic Area). When your browser requests a font from Google's servers, Google may collect your IP address and other browser-related data as part of this request. Google's use of this data is governed by Google's Privacy Policy. We use Google Fonts solely to improve the visual presentation of our Website.

6.2 Tailwind CSS CDN

Our Website may load stylesheet assets from a Content Delivery Network (CDN) that serves the Tailwind CSS framework. When your browser requests assets from such a CDN, the CDN provider's servers may log your IP address and request metadata. CDN services are used purely to deliver consistent, efficient Website styling.

6.3 Email Service Provider

Contact form submissions are delivered to us via an email infrastructure. The email service provider may process your submitted data (name, email, phone, message) as a data processor acting on our behalf, strictly for the purpose of transmitting the message to us. Such providers are contractually required to handle your data securely and in accordance with applicable law.

6.4 No Third-Party Marketing

We do not share your personal data with any third-party advertisers, marketing platforms, or data brokers. We do not engage in behavioural advertising or cross-site tracking of our Website visitors.

7. International Data Transfers

As our Website uses certain third-party services (such as Google Fonts and CDN providers) whose servers may be located outside of Thailand, your data may be transferred to, stored in, or processed in countries other than Thailand. These countries may have data protection laws that differ from those in Thailand.

Where such international transfers occur, we take reasonable steps to ensure that your personal data is adequately protected in accordance with the requirements of the PDPA and any regulations issued by the Personal Data Protection Committee of Thailand. This may include relying on:

• Transfers to countries that have been deemed to provide an adequate level of data protection.
• Standard contractual clauses or equivalent data protection agreements with the receiving parties.
• Your explicit consent to the transfer where required.

By using our Website and submitting information through our contact form, you acknowledge that your personal data may be transferred internationally as described above.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Contact Form Submissions: Records of enquiries submitted through our contact form are retained for a period of up to two (2) years from the date of submission, or for as long as necessary to maintain our relationship with you and respond to any follow-up matters. After this period, records are securely deleted or anonymised.
• Server Logs: Technical access logs are typically retained for up to 90 days and then automatically deleted, unless retention is required for security investigation or legal compliance purposes.
• Analytics Data: Anonymised or aggregated analytics data (where you have consented to analytics cookies) may be retained for longer periods, as such data does not identify individual persons.
• Legal Holds: If we are required by Thai law, regulatory obligation, or legal proceedings to retain data beyond the above periods, we will do so and will delete it as soon as the obligation no longer applies.

When personal data is no longer required, we will securely delete, destroy, or anonymise it in accordance with our internal data management procedures.

9. Your Rights Under the Thailand PDPA

Under the Personal Data Protection Act B.E. 2562 (2019), you have the following rights in relation to your personal data that we hold:

• Right to be Informed (Section 23): You have the right to be informed of the purposes and legal basis for which your personal data is collected and processed. This Privacy Policy serves as our primary means of fulfilling this obligation.
• Right of Access (Section 30): You have the right to request access to and obtain a copy of your personal data that we hold, as well as information about how it is being used.
• Right to Data Portability (Section 31): Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transmit that data to another data controller.
• Right to Rectification (Section 35): You have the right to request that inaccurate or incomplete personal data we hold about you be corrected or updated without delay.
• Right to Erasure (Section 33): You have the right to request that we delete or destroy your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, where you withdraw consent, or where the data has been unlawfully processed.
• Right to Restrict Processing (Section 34): You have the right to request that we suspend the processing of your personal data in certain circumstances, such as while the accuracy of the data is being verified or where you have objected to processing.
• Right to Object (Section 32): You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis, or where your data is used for direct marketing purposes.
• Right to Withdraw Consent (Section 19): Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand if you believe your personal data rights have been violated. Contact details for the PDPC are available on their official website.

To exercise any of the above rights, please contact us using the details provided in Section 13 of this Policy. We will respond to your request within 30 days of receipt, in accordance with the timelines set out in the PDPA. We may need to verify your identity before processing your request.

Please note that certain rights are subject to limitations and exceptions under Thai law. For example, we may decline an erasure request where we are required to retain data to comply with a legal obligation.

10. Data Security Measures

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, alteration, or disclosure. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your browser and our Website is encrypted using industry-standard Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocols, as indicated by the HTTPS prefix in our Website address.
• Access Controls: Access to personal data stored in our internal systems is restricted to authorised personnel only, on a need-to-know basis.
• Secure Email Transmission: Contact form submissions are transmitted to our team via secured email channels.
• Regular Reviews: We periodically review our data security practices and update them as necessary to address evolving risks and best practices.
• Staff Awareness: Our team members who handle personal data are made aware of their responsibilities under this Policy and applicable Thai data protection law.
• Incident Response: In the event of a personal data breach that is likely to affect your rights and freedoms, we will notify you and the relevant Thai authorities in accordance with the requirements of the PDPA.

While we take all reasonable steps to protect your personal data, please be aware that no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.

11. Children's Privacy

Our Website and services are intended for use by adults and are not directed at children under the age of 10 years (the age of consent threshold under the PDPA). We do not knowingly collect personal data from children under 10 years of age without the consent of a holder of parental responsibility.

For minors aged between 10 and 20 years, the PDPA may require consent from a parent or legal guardian for certain types of processing. We do not specifically target our services at minors. If you are under 20 years of age, please seek guidance from a parent or legal guardian before submitting any personal information to us.

If we become aware that we have inadvertently collected personal data from a child without appropriate consent, we will take immediate steps to delete that information. If you believe we may have collected information from a child, please contact us at [email protected].

12. Links to External Websites

Our Website may contain hyperlinks to third-party websites, resources, or services that are not operated by us. These links are provided for your convenience and information only. We have no control over the content or privacy practices of those external websites and do not accept responsibility for them.

We encourage you to review the privacy policies of any third-party websites you visit. This Privacy Policy applies solely to personal data collected through our Website at tomorrowthailand.net.

13. Contact Us — Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please do not hesitate to contact us. We are committed to addressing your concerns promptly and transparently.

We aim to respond to all privacy-related enquiries within 30 calendar days. In complex cases, we may extend this period by a further 60 days, in which case we will inform you of the extension and the reasons for it.

If you are not satisfied with our response, you have the right to submit a complaint to the Office of the Personal Data Protection Committee (PDPC) of Thailand, which is the regulatory authority responsible for enforcing the PDPA.

14. Compliance with Thai Law

This Privacy Policy is designed to comply with the Personal Data Protection Act B.E. 2562 (2019) of Thailand, which came into full effect on 1 June 2022. The PDPA establishes the legal framework for the collection, use, disclosure, and protection of personal data of individuals in Thailand.

As the Data Controller under the PDPA, FIDELIS LIGHTHOUSE LLC is responsible for determining the purposes and means of processing personal data obtained through our Website and services. Where we engage third-party service providers who process data on our behalf, those parties act as Data Processors and are subject to contractual obligations consistent with the requirements of the PDPA.

We are committed to upholding the eight principles of the PDPA, which include lawfulness, fairness, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.

15. Changes to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our business operations, data practices, legal obligations, or regulatory requirements. Any changes will be effective immediately upon posting the updated Policy on our Website at tomorrowthailand.net/privacy-policy.

We will notify you of material changes to this Policy by:

• Updating the "Last Updated" date at the top of this page.
• Displaying a prominent notice on our Website's homepage or contact page for a reasonable period following the update.
• Where we hold your email address and the change is significant, sending you a notification by email.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of our Website following any posted changes constitutes your acknowledgment of and agreement to the updated Policy.

If you do not agree with any changes to this Policy, you should discontinue use of our Website and may contact us to request deletion of any personal data we hold about you.

This Privacy Policy was last reviewed and updated on 1 January 2025. It is issued by FIDELIS LIGHTHOUSE LLC, operating as Relocation Network, in accordance with the laws of the Kingdom of Thailand.