Privacy Policy

1Who we are

ER Consulting Group Co., Ltd. (บริษัท อีอาร์ คอนซัลติ้ง กรุ๊ป จำกัด), which does business under the name ER Consulting Group ("we"), is the data controller under this policy. We provide business consulting services in strategy, finance and investment, marketing, and product management; business sale and matching services; life and non-life insurance brokerage; and real estate services.

This policy applies to data we receive through our website, our LINE Official Account (@006kxnum), our Facebook page, by phone, and in providing services to our clients.

2Data we collect

When you contact us

• Your full name, phone number, company name or type of business, the topic you want to discuss, and the details you give in the consultation booking form
• Your display name and the messages you send us through LINE OA or Facebook

When you become our client

• Identification and contact data, such as your national ID number, address and email
• Business data needed to provide advice, such as financial statements, shareholder data, and employee data to the extent necessary
• Personal financial data, such as income, assets, liabilities and investment goals, including the investment suitability assessment required by the Securities and Exchange Commission (SEC)
• Insurance policy data, insured property and claims history, when we act as your insurance broker
• Health data, only when necessary to apply for life or health insurance and with your explicit consent (see Section 5)

When you visit our website

• Our website hosting provider may record technical data, such as IP address, browser type and time of visit, for security and to keep the system working

3Check tools on our website

The business health check from financial statements, the personal finance and health check, and the asset gap check calculate all results in the browser on your device. The numbers you enter are not sent to us and are not saved after you close the page.

We receive data only when you choose to send it yourself, for example when you copy the results summary and paste it into a LINE chat with an advisor. Data you send us is handled under this policy.

4Purposes and lawful basis

We use data only for the purposes below, relying on the lawful bases under Sections 24 and 26 of the Personal Data Protection Act B.E. 2562 (2019).

If you do not provide data that is necessary for a contract or required by law, we may be unable to provide some services. For example, we may be unable to submit an insurance application or open an investment account for you.

5Sensitive personal data

Health data is sensitive personal data under the law. We collect it only when necessary to apply for life or health insurance, and we will ask for your explicit written consent every time beforehand. We send this data only to the insurance company you choose to apply to.

The health behavior assessments on our website, such as height, weight and lifestyle habits, are calculated on your device and are not sent to us.

6Disclosure of data

We disclose data only as necessary for the purposes in Section 4, to:

• Life and non-life insurance companies that you choose to request a quote from or apply to
• Securities companies and asset management companies when you open an account or invest on our advice
• Counterparties in a business sale or joint venture only with your permission, and only after the counterparty has signed a non-disclosure agreement
• Our service providers such as website hosting, online data storage and communication app providers, who must use the data only on our instructions
• Professional advisors such as our auditors and legal advisors, who have a duty of confidentiality
• Regulators and government authorities such as the Office of Insurance Commission (OIC) and the Office of the Securities and Exchange Commission (SEC), when required by law

7Transfers outside Thailand

Some of our online service providers may store data on servers outside Thailand. In that case, we will choose providers with adequate personal data protection standards and act as required by the Personal Data Protection Act.

8Retention periods

When the period ends, we will delete or destroy the data, or make it no longer able to identify you.

9Security

• We limit access to data to the advisors who handle your work
• All employees and advisors have a duty of confidentiality, and we sign a non-disclosure agreement with clients before receiving business information
• We store documents and files in systems with identity verification and backups
• We review our security measures regularly

If a personal data breach occurs that poses a risk to your rights, we will notify the Office of the Personal Data Protection Committee (PDPC) within 72 hours of becoming aware of it, and will notify you without delay if the risk is high.

10Your rights

You can send requests through the channels in Section 14. We will respond within 30 days of receiving your request, and we may ask for documents to verify your identity before acting on it. Some requests may be refused as permitted by law, such as for data we are required by law to keep. In that case, we will tell you the reason.

11Cookies

This website currently does not use cookies for analytics or advertising. If we start using them in the future, we will first show a banner asking for your consent, and you can decline and still use the website as normal.

12Minors

Our services are intended for people who have reached the age of majority. If we need to collect data about a minor, such as a beneficiary under an insurance policy, we will ask for consent from the person exercising parental authority as required by law.

13Changes to this policy

We may update this policy when our services or the law change. The latest version will be shown on this page with its effective date. If there are significant changes, we will notify clients in advance through the channels we use to stay in contact.

14Contact us