Privacy Policy

1. About This Policy & Data Controller

Patent To You Co., Ltd. ("Patent To You", "we") provides intellectual property consulting and agent services, covering invention patents, petty patents, design patents, trademarks, copyright, and related work. This policy explains how we collect, use, and protect your personal data when you use www.patenttoyou.com or engage our services, in line with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). Using the website or engaging our services means you accept this policy.

2. Information We Collect and How

When you contact us via the website form, phone, email, or LINE, or engage us for an IP matter, we may collect:

• Your name, address, email, phone number, and LINE ID
• Enquiry details, quotation requests, and documents related to your matter — e.g. invention details, trademark or copyright materials
• Billing information needed to issue quotations, invoices, and receipts
• Website usage data collected automatically via cookies (see section 3)

We collect this data directly from you only, and do not intend to collect sensitive data (e.g. health, religion) unless unavoidably relevant to your IP matter and only with your explicit consent.

3. How We Use Your Data, Legal Basis & Cookies

We use your data to (1) respond to enquiries and provide quotations, (2) prepare and file patent, trademark, or copyright matters on your behalf, (3) issue billing documents and manage accounts, (4) improve the website, and (5) meet legal obligations to the Department of Intellectual Property and tax authorities — relying on contractual necessity, legitimate interest, consent, or legal obligation as the basis, depending on the purpose.

The website uses cookies necessary for it to function, plus analytics cookies (Google Analytics) to understand usage. On your first visit, a banner lets you accept cookie use, and you can disable cookies at any time via your browser settings. See our Cookie Policy for details.

4. Third-Party Services & International Transfers

We use the following external providers, which may process some data on our behalf:

• Formspree — handles and forwards submissions from the website contact form
• Google Analytics / Maps — website usage analytics and the office map
• LINE and Facebook — when you contact us through those channels
• Google Drive and Microsoft OneDrive — used to store some client documents in the cloud

Client documents are stored primarily on our own servers in Thailand; some may also be stored via Google Drive or Microsoft OneDrive, which may process data on servers outside Thailand. Where that happens, we rely on PDPA Sections 28-29 — e.g. appropriate safeguards or contractual necessity — to permit the transfer. We do not accept card payments or use an online payment processor — payment is by bank transfer only.

5. Data Retention

We keep data only as long as needed for the purposes above. General enquiries that don't proceed into a client matter are kept for 2 years from the date of enquiry. Client files and case-related documents are kept for 10 years after completion of the engagement, unless a longer period is required by applicable law or agreed with the client. Accounting records are kept as required by Thai law (typically 5 years). After that, we delete or anonymize the data.

6. Security & Disclosure

We restrict access to personal data to staff who need it, and use reasonable measures to prevent unauthorized access, loss, or disclosure. We disclose data only as needed to the Department of Intellectual Property, foreign associates (for international matters), and the providers listed in section 4. We do not sell your personal data to third parties.

7. Your Rights Under the PDPA

You have the right to access, correct, delete, restrict, object to, or request transfer of your personal data, and to withdraw consent at any time. To exercise these rights, contact us using the details in section 8. We aim to respond within 30 days, unless a shorter or longer period is required or permitted by law. You may also complain to Thailand's Personal Data Protection Committee (PDPC) if you believe we have not complied with the PDPA.

8. Changes to This Policy & Contact Us

We may update this policy from time to time; the "last updated" date at the top of this page will reflect the latest version. For questions or to exercise your rights, please contact us.