1. Introduction
Marquen ("the studio", "we", "us", or "our") is a market research advisory studio registered and operating from 218 Silom Road, Khwaeng Suriya Wong, Khet Bang Rak, Bangkok 10500, Thailand. This policy describes how we collect, use, hold, and disclose personal data in the course of running the studio's website and providing research engagements to client organisations.
The policy is written to align with Thailand's Personal Data Protection Act B.E. 2562 (2019) — the PDPA — and with the codes of conduct published by ESOMAR (the global association for market, opinion, and social research). Where research subjects are based outside Thailand, additional regional rules may also apply; we say so explicitly in the relevant engagement scoping document.
If you have questions about this policy, write to us at [email protected].
2. The data we collect
We collect personal data in three settings: through our website, through correspondence with prospective clients, and through fieldwork conducted as part of an engagement.
2.1 Website
When you submit the contact form on our website, we collect the name, email address, telephone number (if you choose to give it), and the text of any message you write. We hold this so we can respond to your enquiry and, if a scoping conversation follows, so we can keep a record of what was discussed.
We also collect a small amount of technical data via cookies and analytics. See our Cookie Policy for the detail.
2.2 Correspondence with prospective clients
Email and telephone correspondence with prospective clients is held in our business systems for the purposes of scoping work, drafting proposals, and keeping a record of discussions. Where a written proposal is issued, the proposal and supporting notes are held under the engagement file.
2.3 Fieldwork
Where an engagement involves stakeholder or customer interviews, we collect personal data from the people we interview. Typically this includes name, role, organisation, contact details, and the interview transcript itself. Fieldwork is conducted under explicit, recorded consent. Participants are told, before the interview begins, who has commissioned the work, how the transcript will be used, how long it will be held, and how to withdraw their data.
We do not collect special categories of data (health, political opinion, sexual orientation, religious belief, biometric data) unless the research design specifically requires it and the participant has given separate, written consent.
3. The legal basis on which we hold data
We rely on the following legal bases under the PDPA:
- Consent — for fieldwork participation, marketing communications (where you have asked to receive them), and optional cookies.
- Contractual necessity — for client engagements, where we hold data in order to deliver the work we have been commissioned to do.
- Legitimate interest — for responding to enquiries you have sent us, for keeping basic business records, and for the security of our systems. Where we rely on legitimate interest, we have weighed it against your rights and interests.
- Legal obligation — for tax, accounting, and regulatory record-keeping in Thailand.
4. How we use the data
We use personal data for the following purposes:
- To respond to enquiries received through the website or by email.
- To scope, draft, deliver, and document research engagements.
- To conduct fieldwork interviews and quantitative surveys, transcribe and synthesise the results, and produce written reports for the commissioning client.
- To maintain accounting records and meet tax and regulatory obligations.
- To improve the studio's website, services, and internal processes.
We do not sell personal data. We do not use personal data for automated decision-making in any sense that would have legal or similarly significant effect on you.
5. Who we share data with
We share personal data only where it is necessary to do the work we have been asked to do, or where we are required by law. The categories are:
- Commissioning clients — for fieldwork conducted on their behalf, we share interview synthesis, transcripts (where consent permits), and chart packs. Identifying detail in transcripts is, by default, redacted unless the client has explicitly asked otherwise and the participant has consented.
- Subcontractors — chiefly transcription services and validated survey panel partners. These are bound by written confidentiality and data-processing agreements that mirror this policy.
- Professional advisers — accountants, auditors, and legal advisers, where there is a clear need to share.
- Public authorities — only where required by Thai law or by a valid legal order.
6. International data transfer
Most of our data processing takes place within Thailand. Where transcripts or analysis files are processed by subcontractors based outside Thailand, we satisfy ourselves that the processor's jurisdiction provides adequate data protection, or we put in place written safeguards (typically standard contractual clauses or equivalent) before any transfer takes place.
7. How long we hold data
We hold personal data only as long as is necessary for the purpose for which it was collected. Typical retention windows are:
- Website enquiries — 24 months from the last contact, after which we delete or anonymise.
- Engagement records — for the duration of the engagement and for seven years thereafter, in line with Thai accounting and tax obligations.
- Fieldwork transcripts — typically 24 months from the close of the engagement, unless the client has agreed in writing that we should hold them longer or the participant has asked us to delete sooner.
- Marketing contacts — until you ask us to remove you.
8. How we hold data securely
Personal data is held on access-controlled systems. Transcripts and engagement files are kept in encrypted storage. Access is limited to senior researchers and operations staff with a clear business need. We review access logs and storage hygiene on a regular basis. Where we work with subcontractors, we require equivalent technical and organisational measures.
If a personal data breach occurs that is likely to result in a risk to the rights and freedoms of affected individuals, we will notify the Office of the Personal Data Protection Committee in Thailand, and the affected individuals, in line with the timing requirements of the PDPA.
9. Cookies
The website uses a small number of cookies. Essential cookies are required for the site to function. Optional cookies (analytics, marketing, preferences) are loaded only with your consent, expressed through the cookie banner on the homepage. The detail is set out in our Cookie Policy.
10. Your rights
Under the PDPA, you have the following rights in relation to personal data we hold about you:
- The right to be informed about how your data is used (this policy).
- The right to access a copy of the data we hold.
- The right to ask us to correct data that is inaccurate or incomplete.
- The right to ask us to erase data, where there is no compelling reason for us to keep it.
- The right to ask us to suspend processing.
- The right to object to processing carried out on the basis of legitimate interest.
- The right to data portability — to receive your data in a structured, machine-readable form.
- The right to withdraw consent, where consent was the basis on which we held the data.
- The right to lodge a complaint with the Office of the Personal Data Protection Committee in Thailand.
To exercise any of these rights, write to us at [email protected]. We will respond within 30 days and, where the request is straightforward, often sooner.
11. Third-party links
Our website may, from time to time, contain links to third-party websites or services. This policy does not cover the practices of those third parties; we recommend reading their privacy notices before submitting any personal data to them.
12. Children's privacy
The studio's services are directed to organisations and to professionals working within them. The website and its services are not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe we have collected such data, please write to us so we can delete it.
13. Changes to this policy
We update this policy from time to time, typically when our practices change or to reflect changes in law. The current version is dated above. Where the changes are material, we will say so on the homepage for a reasonable period after they take effect.
14. Contact
The data controller for personal data held in connection with this policy is Marquen, of 218 Silom Road, Khwaeng Suriya Wong, Khet Bang Rak, Bangkok 10500, Thailand. For any privacy-related question, write to [email protected] or telephone +66 2 5746 8230 during working hours (Mon–Fri 09:00–18:00 ICT).