{"id":11930,"date":"2025-02-22T13:50:58","date_gmt":"2025-02-22T13:50:58","guid":{"rendered":"https:\/\/www.othellointernational.com\/?page_id=11930"},"modified":"2026-07-25T00:47:53","modified_gmt":"2026-07-25T00:47:53","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.othellointernational.com\/th\/privacy-policy\/","title":{"rendered":"\u0e19\u0e42\u0e22\u0e1a\u0e32\u0e22\u0e04\u0e27\u0e32\u0e21\u0e40\u0e1b\u0e47\u0e19\u0e2a\u0e48\u0e27\u0e19\u0e15\u0e31\u0e27"},"content":{"rendered":"\n<!-- ===================================================================\n     OTHELLO INTERNATIONAL \u2014 PRIVACY POLICY \u00b7 v12.3 INTERACTIVE\n     URL: \/privacy-policy\/\n     Thai PDPA primary \u00b7 EU GDPR for European matters \u00b7 Regional ASEAN PDPAs\n     11 substantive sections \u00b7 \u2605 4-tile Privacy Commitments anchor block\n     REBUILD v12.4 \u2014 fully red-primary \u00b7 zero gold\n   =================================================================== -->\n\n<style>\n@import url('https:\/\/fonts.googleapis.com\/css2?family=Poppins:wght@300;400;500;600;700;800;900&family=Fraunces:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700&family=JetBrains+Mono:wght@400;500;600;700&family=Sarabun:wght@400;500;600;700&display=swap');\n\n.oth-pp{\n  --k:#000;--k0:#050505;--k1:#0a0a0a;--k2:#141414;--k3:#1a1a1a;--k4:#1f1f1f;\n  --line:#242424;--line2:rgba(255,255,255,.06);\n  --r:#ED4036;--r1:#FF5046;--r2:#C2261C;--r3:#8a1a13;--r4:rgba(237,64,54,.1);\n  --w:#fff;--w1:rgba(255,255,255,.84);--w2:rgba(255,255,255,.60);--w3:rgba(255,255,255,.42);--w4:rgba(255,255,255,.20);\n  --g:#4ade80;--blue:#3b82f6;--amber:#f59e0b;\n  --s:'Poppins',-apple-system,sans-serif;--d:'Fraunces',Georgia,serif;\n  --m:'JetBrains Mono',Menlo,monospace;--th:'Sarabun',sans-serif;\n  --ease:cubic-bezier(.16,1,.3,1);\n  font-family:var(--s);color:var(--w);background:var(--k);line-height:1.6;font-size:16px;\n  margin:0;padding:0;width:100%;overflow-x:hidden;scroll-behavior:smooth;scroll-padding-top:88px;\n}\n.oth-pp *,.oth-pp *::before,.oth-pp *::after{box-sizing:border-box}\n.oth-pp .wrap{max-width:1340px;margin:0 auto;padding:0 40px}\n.oth-pp .wrap-narrow{max-width:1040px;margin:0 auto;padding:0 40px}\n.oth-pp a:focus-visible,.oth-pp button:focus-visible,.oth-pp summary:focus-visible{outline:2px solid var(--r1);outline-offset:3px;border-radius:2px}\n\n.oth-pp [data-reveal]{opacity:0;transform:translateY(20px);transition:opacity .8s var(--ease),transform .8s var(--ease)}\n.oth-pp [data-reveal].in{opacity:1;transform:translateY(0)}\n.oth-pp [data-reveal-stagger] > *{opacity:0;transform:translateY(16px);transition:opacity .7s var(--ease),transform .7s var(--ease)}\n.oth-pp [data-reveal-stagger].in > *:nth-child(1){transition-delay:0s}\n.oth-pp [data-reveal-stagger].in > *:nth-child(2){transition-delay:.05s}\n.oth-pp [data-reveal-stagger].in > *:nth-child(3){transition-delay:.10s}\n.oth-pp [data-reveal-stagger].in > *:nth-child(4){transition-delay:.15s}\n.oth-pp [data-reveal-stagger].in > *:nth-child(5){transition-delay:.20s}\n.oth-pp [data-reveal-stagger].in > *:nth-child(6){transition-delay:.25s}\n.oth-pp [data-reveal-stagger].in > *:nth-child(7){transition-delay:.30s}\n.oth-pp [data-reveal-stagger].in > *:nth-child(8){transition-delay:.35s}\n.oth-pp [data-reveal-stagger].in > *:nth-child(9){transition-delay:.40s}\n.oth-pp [data-reveal-stagger].in > *:nth-child(10){transition-delay:.45s}\n.oth-pp [data-reveal-stagger].in > *:nth-child(11){transition-delay:.50s}\n.oth-pp [data-reveal-stagger].in > *{opacity:1;transform:translateY(0)}\n\n\/* === BRAND-CONSISTENT TYPOGRAPHY \u00b7 RED PRIMARY === *\/\n.oth-pp .eyebrow{display:inline-flex;align-items:center;gap:14px;font-family:var(--m);font-size:11px;font-weight:600;letter-spacing:.18em;text-transform:uppercase;color:var(--r);margin-bottom:22px}\n.oth-pp .eyebrow::before{content:\"\";width:36px;height:1px;background:var(--r)}\n\n@keyframes pp-pulse{0%,100%{box-shadow:0 0 0 0 rgba(74,222,128,.6)}50%{box-shadow:0 0 0 10px rgba(74,222,128,0)}}\n@keyframes pp-glow{0%,100%{opacity:1}50%{opacity:.75}}\n@keyframes pp-arrow{0%,100%{transform:translateX(0)}50%{transform:translateX(4px)}}\n\n.oth-pp .strip{background:var(--k1);border-bottom:1px solid var(--line);padding:12px 0;font-family:var(--m);font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:var(--w2)}\n.oth-pp .strip-row{display:flex;align-items:center;justify-content:space-between;gap:24px;flex-wrap:wrap}\n.oth-pp .strip-row .l{display:flex;align-items:center;gap:12px}\n.oth-pp .strip-dot{width:8px;height:8px;background:var(--g);border-radius:50%;animation:pp-pulse 2s ease-in-out infinite}\n.oth-pp .strip-row .r{color:var(--w3)}\n.oth-pp .strip-row .r b{color:var(--w);font-weight:500}\n\n.oth-pp .crumb{background:var(--k);border-bottom:1px solid var(--line);padding:18px 0;font-family:var(--m);font-size:11px;letter-spacing:.10em;text-transform:uppercase;color:var(--w3)}\n.oth-pp .crumb a{color:var(--w2);text-decoration:none;transition:color .2s}\n.oth-pp .crumb a:hover{color:var(--r)}\n.oth-pp .crumb .sep{margin:0 12px;color:var(--w4)}\n.oth-pp .crumb .here{color:var(--w)}\n\n\/* ============ HERO \u00b7 RED PRIMARY ============ *\/\n.oth-pp .hero{padding:72px 0 84px;background:var(--k);position:relative;overflow:hidden;border-bottom:1px solid var(--line)}\n.oth-pp .hero::before{content:\"\";position:absolute;inset:0;background:radial-gradient(ellipse 1200px 700px at 25% 35%,rgba(237,64,54,.16),transparent 65%),radial-gradient(ellipse 600px 400px at 85% 75%,rgba(237,64,54,.06),transparent 65%);pointer-events:none;animation:pp-glow 8s ease-in-out infinite}\n.oth-pp .hero::after{content:\"\";position:absolute;inset:0;background-image:linear-gradient(rgba(255,255,255,.025) 1px,transparent 1px),linear-gradient(90deg,rgba(255,255,255,.025) 1px,transparent 1px);background-size:64px 64px;pointer-events:none;mask-image:radial-gradient(ellipse 1200px 700px at 50% 30%,black,transparent 78%);-webkit-mask-image:radial-gradient(ellipse 1200px 700px at 50% 30%,black,transparent 78%)}\n.oth-pp .hero-inner{position:relative;z-index:2}\n\n.oth-pp .hero-tag{display:inline-flex;align-items:center;gap:14px;padding:9px 20px;background:rgba(237,64,54,.10);border:1px solid rgba(237,64,54,.40);border-radius:100px;font-family:var(--m);font-size:11px;letter-spacing:.16em;text-transform:uppercase;color:var(--r1);font-weight:600;margin-bottom:26px;backdrop-filter:blur(6px);-webkit-backdrop-filter:blur(6px)}\n.oth-pp .hero-tag .dot{width:7px;height:7px;background:var(--g);border-radius:50%;animation:pp-pulse 2s ease-in-out infinite}\n\n.oth-pp .hero h1{font-size:clamp(32px,4.6vw,58px);line-height:1.05;font-weight:700;letter-spacing:-.028em;margin:0 0 22px;color:var(--w);max-width:24ch}\n.oth-pp .hero h1 em{font-family:var(--d);font-style:italic;font-weight:500;color:var(--r)}\n\n.oth-pp .hero-meta{display:flex;gap:32px;margin-bottom:30px;flex-wrap:wrap;font-family:var(--m);font-size:11px;letter-spacing:.12em;text-transform:uppercase;color:var(--w2)}\n.oth-pp .hero-meta .mi{display:flex;align-items:center;gap:8px}\n.oth-pp .hero-meta .mi-k{color:var(--w3);font-weight:500}\n.oth-pp .hero-meta .mi-v{color:var(--w);font-weight:700;letter-spacing:.10em}\n.oth-pp .hero-meta .mi-v.r{color:var(--r)}\n\n.oth-pp .hero-intro{font-size:17px;line-height:1.7;color:var(--w1);max-width:78ch;margin:0}\n.oth-pp .hero-intro strong{color:var(--w);font-weight:600}\n.oth-pp .hero-intro em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n.oth-pp .hero-intro a{color:var(--r);text-decoration:none;border-bottom:1px solid rgba(237,64,54,.4)}\n.oth-pp .hero-intro a:hover{border-bottom-color:var(--r)}\n\n\/* ============ TABLE OF CONTENTS \u00b7 RED PRIMARY ============ *\/\n.oth-pp .toc{background:var(--k1);border-bottom:1px solid var(--line);padding:36px 0;position:relative;overflow:hidden}\n.oth-pp .toc::before{content:\"\";position:absolute;top:0;left:50%;transform:translateX(-50%);width:1000px;height:200px;background:radial-gradient(ellipse,rgba(237,64,54,.05),transparent 70%);pointer-events:none}\n.oth-pp .toc-head{font-family:var(--m);font-size:10.5px;letter-spacing:.14em;text-transform:uppercase;color:var(--r);font-weight:700;margin-bottom:16px;display:flex;align-items:center;gap:10px;position:relative;z-index:2}\n.oth-pp .toc-head::before{content:\"\";width:24px;height:1px;background:var(--r)}\n.oth-pp .toc-grid{display:flex;flex-wrap:wrap;gap:8px;position:relative;z-index:2}\n.oth-pp .toc-chip{display:inline-flex;align-items:center;gap:10px;padding:9px 16px;background:var(--k);border:1px solid var(--line);border-radius:100px;text-decoration:none;color:var(--w1);font-family:var(--s);font-size:12.5px;font-weight:500;letter-spacing:-.005em;transition:all .3s var(--ease);line-height:1.2}\n.oth-pp .toc-chip .tc-n{font-family:var(--m);font-size:10px;font-weight:700;color:var(--r);letter-spacing:.06em}\n.oth-pp .toc-chip:hover{background:var(--k3);border-color:rgba(237,64,54,.4);color:var(--w);transform:translateY(-2px);box-shadow:0 8px 20px rgba(0,0,0,.4)}\n.oth-pp .toc-chip:hover .tc-n{color:var(--r1)}\n\n@media (max-width:600px){\n  .oth-pp .wrap,.oth-pp .wrap-narrow{padding:0 22px}\n  .oth-pp .hero{padding:48px 0 56px}\n  .oth-pp .hero h1{font-size:30px}\n  .oth-pp .hero-meta{gap:16px;flex-direction:column}\n  .oth-pp .toc{padding:28px 0}\n}\n@media (prefers-reduced-motion:reduce){\n  .oth-pp *,.oth-pp *::before,.oth-pp *::after{animation-duration:.01ms !important;transition-duration:.01ms !important}\n  .oth-pp [data-reveal],.oth-pp [data-reveal-stagger] > *{opacity:1 !important;transform:none !important}\n}\n<\/style>\n\n<div class=\"oth-pp\" id=\"oth-pp-top\">\n\n<!-- STATUS STRIP -->\n<div class=\"strip\">\n  <div class=\"wrap\"><div class=\"strip-row\">\n    <div class=\"l\"><span class=\"strip-dot\"><\/span>PRIVACY POLICY \u00b7 THAI PDPA PRIMARY \u00b7 EU GDPR FOR EUROPEAN MATTERS \u00b7 REGIONAL PDPAs<\/div>\n    <div class=\"r\">Last Updated <span style=\"color:var(--r)\">\u00b7<\/span> <b>15 May 2026<\/b><\/div>\n  <\/div><\/div>\n<\/div>\n\n<!-- BREADCRUMB -->\n<div class=\"crumb\">\n  <div class=\"wrap\">\n    <a href=\"\/\">Othello<\/a>\n    <span class=\"sep\">\/<\/span>\n    <span class=\"here\">Privacy Policy<\/span>\n  <\/div>\n<\/div>\n\n<!-- ============ HERO ============ -->\n<section class=\"hero\">\n  <div class=\"wrap-narrow\"><div class=\"hero-inner\">\n    <div class=\"hero-tag\" data-reveal><span class=\"dot\"><\/span>\u2605 THAI PDPA \u00b7 EU GDPR \u00b7 ASEAN PDPAs \u00b7 \u2605 ENGAGEMENT-TIER DATA PROTECTION DISCIPLINE<\/div>\n    <h1 data-reveal>Privacy Policy.<br><em>Institutional \u00b7 multi-jurisdiction \u00b7 NDA-disciplined.<\/em><\/h1>\n    <div class=\"hero-meta\" data-reveal>\n      <div class=\"mi\"><span class=\"mi-k\">Effective:<\/span><span class=\"mi-v\">15 May 2026<\/span><\/div>\n      <div class=\"mi\"><span class=\"mi-k\">Version:<\/span><span class=\"mi-v\">v12.3<\/span><\/div>\n      <div class=\"mi\"><span class=\"mi-k\">Controller:<\/span><span class=\"mi-v r\">Othello International<\/span><\/div>\n      <div class=\"mi\"><span class=\"mi-k\">Jurisdiction:<\/span><span class=\"mi-v\">Bangkok, Thailand<\/span><\/div>\n    <\/div>\n    <p class=\"hero-intro\" data-reveal>This <strong>Privacy Policy<\/strong> documents how <em>Othello International<\/em> \u2014 a Bangkok-domiciled institutional bilingual translation, interpretation, and ESG advisory firm \u2014 collects, processes, retains, and protects personal data across its scoping, engagement, production, and audit-trail workflows. Othello is registered in Thailand and primarily regulated under the <a href=\"#section-03\">Personal Data Protection Act B.E. 2562 (Thai PDPA \u00b7 effective 1 June 2022)<\/a>. For European-language engagements (see <a href=\"\/languages\/european\/\">European Languages Translation<\/a>) and EU-domiciled client matters, <em>EU GDPR (Regulation 2016\/679) is the substantive primary anchor<\/em>. For regional ASEAN engagements (Indonesian, Vietnamese, Malaysian, Singaporean, Philippines, Cambodian, Lao, Burmese matter), regional data-protection frameworks apply as set out in <a href=\"#section-06\">Section 06 \u00b7 International Transfers<\/a> and <a href=\"#section-07\">Section 07 \u00b7 Your Rights<\/a>. <strong>The substantive operational anchor of this policy is Othello&#8217;s engagement-tier NDA-from-first-email discipline<\/strong> \u2014 privacy protection begins at first contact, not at engagement-letter signature.<\/p>\n  <\/div><\/div>\n<\/section>\n\n<!-- ============ TABLE OF CONTENTS ============ -->\n<section class=\"toc\">\n  <div class=\"wrap-narrow\">\n    <div class=\"toc-head\">\u2605 Table of Contents \u00b7 Eleven Substantive Sections<\/div>\n    <div class=\"toc-grid\" data-reveal-stagger>\n      <a href=\"#section-commitments\" class=\"toc-chip\"><span class=\"tc-n\">\u2605<\/span>Privacy Commitments<\/a>\n      <a href=\"#section-01\" class=\"toc-chip\"><span class=\"tc-n\">01<\/span>Who We Are \u00b7 Controller Identity<\/a>\n      <a href=\"#section-02\" class=\"toc-chip\"><span class=\"tc-n\">02<\/span>Data Categories Collected<\/a>\n      <a href=\"#section-03\" class=\"toc-chip\"><span class=\"tc-n\">03<\/span>Legal Bases for Processing<\/a>\n      <a href=\"#section-04\" class=\"toc-chip\"><span class=\"tc-n\">04<\/span>Retention Periods<\/a>\n      <a href=\"#section-05\" class=\"toc-chip\"><span class=\"tc-n\">05<\/span>Who We Share With<\/a>\n      <a href=\"#section-06\" class=\"toc-chip\"><span class=\"tc-n\">06<\/span>International Transfers<\/a>\n      <a href=\"#section-07\" class=\"toc-chip\"><span class=\"tc-n\">07<\/span>Your Rights<\/a>\n      <a href=\"#section-08\" class=\"toc-chip\"><span class=\"tc-n\">08<\/span>Cookies &amp; Analytics<\/a>\n      <a href=\"#section-09\" class=\"toc-chip\"><span class=\"tc-n\">09<\/span>Security Commitments<\/a>\n      <a href=\"#section-10\" class=\"toc-chip\"><span class=\"tc-n\">10<\/span>Children&#8217;s Privacy<\/a>\n      <a href=\"#section-11\" class=\"toc-chip\"><span class=\"tc-n\">11<\/span>Changes &amp; Contact<\/a>\n    <\/div>\n  <\/div>\n<\/section>\n\n<style>\n\/* ============ SHARED SECTION STYLES ============ *\/\n.oth-pp .section{padding:96px 0;background:var(--k);position:relative}\n.oth-pp .section.alt{background:var(--k1)}\n.oth-pp .sec-head{margin-bottom:36px;max-width:880px}\n.oth-pp .sec-num{font-family:var(--m);font-size:11px;letter-spacing:.16em;text-transform:uppercase;color:var(--r);font-weight:700;margin-bottom:12px;display:flex;align-items:center;gap:10px}\n.oth-pp .sec-num::before{content:\"\";width:30px;height:1px;background:var(--r)}\n.oth-pp .sec-head h2{font-family:var(--s);font-size:clamp(28px,3.8vw,42px);line-height:1.12;font-weight:700;letter-spacing:-.02em;margin:0 0 18px;color:var(--w)}\n.oth-pp .sec-head h2 em{font-family:var(--d);font-style:italic;font-weight:500;color:var(--r)}\n.oth-pp .sec-head .sec-lead{font-size:16px;line-height:1.7;color:var(--w1);max-width:78ch;margin:0}\n.oth-pp .sec-head .sec-lead strong{color:var(--w);font-weight:600}\n.oth-pp .sec-head .sec-lead em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n.oth-pp .sec-head .sec-lead a{color:var(--r);text-decoration:none;border-bottom:1px solid rgba(237,64,54,.4)}\n\n.oth-pp .body p{font-size:15px;line-height:1.75;color:var(--w1);margin:0 0 16px;max-width:82ch}\n.oth-pp .body p strong{color:var(--w);font-weight:600}\n.oth-pp .body p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n.oth-pp .body p a{color:var(--r);text-decoration:none;border-bottom:1px solid rgba(237,64,54,.4)}\n.oth-pp .body p a:hover{border-bottom-color:var(--r)}\n\n\/* ============ \u2605 PRIVACY COMMITMENTS \u00b7 RED-THEMED ANCHOR BLOCK (matches Quality Discipline block pattern across language pages) ============ *\/\n.oth-pp .pc-sec{padding:96px 0;background:var(--k1);border-top:1px solid var(--line);position:relative;overflow:hidden}\n.oth-pp .pc-sec::before{content:\"\";position:absolute;top:-80px;left:50%;width:1100px;height:500px;background:radial-gradient(ellipse,rgba(237,64,54,.06),transparent 70%);transform:translateX(-50%);pointer-events:none}\n\n.oth-pp .pc-block{background:linear-gradient(135deg,rgba(237,64,54,.08) 0%,var(--k3) 100%);border:1px solid rgba(237,64,54,.30);padding:42px 46px;position:relative;overflow:hidden;transition:all .5s var(--ease)}\n.oth-pp .pc-block::before{content:\"\";position:absolute;top:0;left:0;width:6px;height:100%;background:linear-gradient(180deg,var(--r) 0%,var(--r3) 100%);transition:width .35s var(--ease)}\n.oth-pp .pc-block:hover::before{width:8px}\n.oth-pp .pc-block::after{content:\"PRIVACY\";position:absolute;top:-30px;right:-15px;font-family:var(--d);font-style:italic;font-size:clamp(80px,11vw,170px);line-height:1;color:var(--r);opacity:.05;font-weight:600;pointer-events:none;letter-spacing:-.03em}\n.oth-pp .pc-block:hover{transform:translateY(-3px);box-shadow:0 24px 60px rgba(0,0,0,.5),0 0 40px rgba(237,64,54,.10);border-color:rgba(237,64,54,.50)}\n\n.oth-pp .pc-eye{font-family:var(--m);font-size:10.5px;letter-spacing:.16em;text-transform:uppercase;color:var(--r);font-weight:700;margin-bottom:14px;position:relative;z-index:2;display:flex;align-items:center;gap:8px}\n.oth-pp .pc-eye::before{content:\"\u25cf\";color:var(--r);animation:pp-pulse 2s ease-in-out infinite}\n.oth-pp .pc-block h3{font-family:var(--d);font-style:italic;font-size:clamp(24px,3vw,30px);font-weight:500;color:var(--w);margin:0 0 18px;line-height:1.2;letter-spacing:-.01em;position:relative;z-index:2;max-width:42ch}\n.oth-pp .pc-block h3 em{color:var(--r);font-style:italic;font-weight:600}\n.oth-pp .pc-block > p{font-size:14.5px;line-height:1.7;color:var(--w1);margin:0 0 22px;position:relative;z-index:2;max-width:86ch}\n.oth-pp .pc-block > p strong{color:var(--w);font-weight:600}\n.oth-pp .pc-block > p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n\n.oth-pp .pc-grid{display:grid;grid-template-columns:repeat(4,1fr);gap:12px;margin-top:24px;position:relative;z-index:2}\n.oth-pp .pc-tile{background:var(--k);border:1px solid var(--line);border-left:3px solid var(--r);padding:20px 22px;transition:all .3s var(--ease)}\n.oth-pp .pc-tile:hover{background:var(--k2);transform:translateX(4px);border-left-width:5px}\n.oth-pp .pc-tile .pct-k{font-family:var(--m);font-size:10px;color:var(--r);font-weight:700;letter-spacing:.10em;text-transform:uppercase;margin-bottom:8px}\n.oth-pp .pc-tile .pct-h{font-family:var(--d);font-style:italic;font-size:16px;font-weight:600;color:var(--w);margin-bottom:8px;line-height:1.2}\n.oth-pp .pc-tile p{font-size:11.5px;line-height:1.55;color:var(--w1);margin:0}\n.oth-pp .pc-tile p b{color:var(--w);font-weight:600}\n\n@media (max-width:1024px){.oth-pp .pc-grid{grid-template-columns:1fr 1fr;gap:10px}}\n@media (max-width:600px){.oth-pp .pc-block{padding:30px 26px}.oth-pp .pc-grid{grid-template-columns:1fr}.oth-pp .section{padding:60px 0}}\n\n\/* ============ SECTION 01 \u2014 CONTROLLER \u00b7 RED PRIMARY (BOTH cards red \u00b7 no gold variant) ============ *\/\n.oth-pp .controller-grid{display:grid;grid-template-columns:1fr 1fr;gap:18px;margin-top:24px}\n.oth-pp .ctrl-card{background:var(--k2);border:1px solid var(--line);padding:30px 28px;position:relative;overflow:hidden;transition:all .35s var(--ease)}\n.oth-pp .ctrl-card::before{content:\"\";position:absolute;top:0;left:0;width:4px;height:100%;background:var(--r);transition:width .3s var(--ease)}\n.oth-pp .ctrl-card:hover::before{width:6px}\n.oth-pp .ctrl-card:hover{background:var(--k3);border-color:rgba(237,64,54,.3);transform:translateY(-3px);box-shadow:0 16px 40px rgba(0,0,0,.4)}\n\n.oth-pp .ctrl-k{font-family:var(--m);font-size:10px;letter-spacing:.14em;text-transform:uppercase;color:var(--r);font-weight:700;margin-bottom:12px}\n.oth-pp .ctrl-card h3{font-family:var(--d);font-style:italic;font-size:20px;font-weight:600;color:var(--w);margin:0 0 14px;letter-spacing:-.005em;line-height:1.2}\n.oth-pp .ctrl-list{margin:0;padding:0;list-style:none;display:grid;gap:8px}\n.oth-pp .ctrl-row{display:grid;grid-template-columns:120px 1fr;gap:14px;padding:10px 0;border-bottom:1px dashed var(--line);font-size:13.5px;line-height:1.5}\n.oth-pp .ctrl-row:last-child{border-bottom:none}\n.oth-pp .ctrl-row .crk{font-family:var(--m);font-size:10px;color:var(--w3);font-weight:600;letter-spacing:.08em;text-transform:uppercase;padding-top:2px}\n.oth-pp .ctrl-row .crv{color:var(--w1);font-weight:500}\n.oth-pp .ctrl-row .crv b{color:var(--w);font-weight:700}\n.oth-pp .ctrl-row .crv a{color:var(--r);text-decoration:none;border-bottom:1px solid rgba(237,64,54,.4)}\n\n\/* ============ SECTION 02 \u2014 DATA CATEGORIES \u00b7 RED PRIMARY \u00b7 all tags red ============ *\/\n.oth-pp .dc-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:14px;margin-top:24px}\n.oth-pp .dc-card{background:var(--k2);border:1px solid var(--line);padding:26px 24px;position:relative;overflow:hidden;transition:all .35s var(--ease);display:flex;flex-direction:column}\n.oth-pp .dc-card::before{content:\"\";position:absolute;top:0;left:0;width:3px;height:100%;background:var(--r);transition:width .3s var(--ease)}\n.oth-pp .dc-card:hover::before{width:5px}\n.oth-pp .dc-card:hover{background:var(--k3);border-color:rgba(237,64,54,.3);transform:translateY(-3px);box-shadow:0 12px 30px rgba(0,0,0,.4)}\n.oth-pp .dc-num{font-family:var(--m);font-size:9.5px;letter-spacing:.14em;text-transform:uppercase;color:var(--r);font-weight:700;margin-bottom:8px}\n.oth-pp .dc-card h4{font-family:var(--d);font-style:italic;font-size:17px;font-weight:600;color:var(--w);margin:0 0 10px;letter-spacing:-.005em;line-height:1.2}\n.oth-pp .dc-card p{font-size:12.5px;line-height:1.6;color:var(--w1);margin:0 0 12px;flex:1}\n.oth-pp .dc-card p strong{color:var(--w);font-weight:600}\n.oth-pp .dc-card p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n.oth-pp .dc-meta{margin-top:auto;padding-top:10px;border-top:1px dashed var(--line);display:flex;flex-wrap:wrap;gap:5px}\n.oth-pp .dc-tag{font-family:var(--m);font-size:9px;letter-spacing:.04em;color:var(--w2);padding:3px 7px;background:var(--k);border:1px solid var(--line);border-radius:2px;text-transform:uppercase;font-weight:600}\n.oth-pp .dc-tag.r{color:var(--r);border-color:rgba(237,64,54,.3);background:rgba(237,64,54,.06)}\n\n@media (max-width:1024px){.oth-pp .controller-grid{grid-template-columns:1fr;gap:14px}.oth-pp .dc-grid{grid-template-columns:1fr;gap:10px}}\n<\/style>\n\n<!-- ============ \u2605 PRIVACY COMMITMENTS \u00b7 RED-THEMED ANCHOR BLOCK ============ -->\n<section class=\"pc-sec\" id=\"section-commitments\">\n  <div class=\"wrap-narrow\">\n    <div class=\"sec-head\" data-reveal>\n      <div class=\"sec-num\">\u2605 Privacy Commitments \u00b7 Four Operational Anchors<\/div>\n      <h2>Privacy <em>commitments.<\/em> Four operational anchors at engagement-tier.<\/h2>\n      <p class=\"sec-lead\">Before the substantive policy sections, the four <strong>operational privacy commitments<\/strong> below anchor Othello&#8217;s engagement-tier data protection posture. <em>These are the procurement-relevant commitments that institutional procurement panels routinely test for at scoping<\/em>. They apply across in-house bench production (<a href=\"\/languages\/thai-english\/\">Thai-English<\/a> \u00b7 <a href=\"\/languages\/japanese\/\">Japanese<\/a> \u00b7 <a href=\"\/languages\/european\/\">German Desk<\/a>) and partner-routed production (Korean \u00b7 Chinese Simplified \u00b7 Chinese Traditional \u00b7 Lao \u00b7 Burmese \u00b7 Malay \u00b7 Vietnamese \u00b7 Khmer \u00b7 Indonesian \u00b7 European FR\/ES\/IT).<\/p>\n    <\/div>\n\n    <div class=\"pc-block\" data-reveal>\n      <div class=\"pc-eye\">\u2605 FOUR PRIVACY COMMITMENTS \u00b7 ENGAGEMENT-TIER ANCHOR<\/div>\n      <h3>Four privacy commitments. <em>NDA-first \u00b7 no consumer LLM \u00b7 bench-direct sign-off \u00b7 audit-trail consolidated.<\/em><\/h3>\n      <p>The <strong>four anchors below operationalise the substantive privacy posture across every engagement, regardless of language or production tier<\/strong>. They are procurement-relevant rather than aspirational \u2014 they map to specific operational gates (<em>scoping intake \u00b7 termbase governance \u00b7 QA sign-off \u00b7 audit-trail retention<\/em>) documented across the engagement-letter framework. Each anchor is enforced at a specific workflow stage and recorded in the engagement-letter chain.<\/p>\n      <div class=\"pc-grid\" data-reveal-stagger>\n        <div class=\"pc-tile\">\n          <div class=\"pct-k\">\u2605 COMMITMENT 01<\/div>\n          <div class=\"pct-h\">NDA-from-first-email<\/div>\n          <p><b>Privacy protection begins at first contact<\/b> \u00b7 scoping content protected before engagement letter signed \u00b7 chain-protected across in-house and partner-routed tiers<\/p>\n        <\/div>\n        <div class=\"pc-tile\">\n          <div class=\"pct-k\">\u2605 COMMITMENT 02<\/div>\n          <div class=\"pct-h\">No consumer LLM endpoints<\/div>\n          <p><b>Substantive client content never routed<\/b> through consumer-AI endpoints (ChatGPT\/Claude\/Gemini) \u00b7 applies to bench and partner-routed production \u00b7 engagement-letter bound<\/p>\n        <\/div>\n        <div class=\"pc-tile\">\n          <div class=\"pct-k\">\u2605 COMMITMENT 03<\/div>\n          <div class=\"pct-h\">Bench-direct sign-off<\/div>\n          <p><b>QA cycle and sign-off Bangkok bench-direct<\/b> \u00b7 partner-routed deliverables never delivered partner-direct to client \u00b7 privilege chain preserved<\/p>\n        <\/div>\n        <div class=\"pc-tile\">\n          <div class=\"pct-k\">\u2605 COMMITMENT 04<\/div>\n          <div class=\"pct-h\">Audit-trail consolidated<\/div>\n          <p><b>One Bangkok-retained audit-trail file per engagement<\/b> \u00b7 partner-engagement records consolidated \u00b7 Thai PDPA + EU GDPR + regional PDPA evidence-tier<\/p>\n        <\/div>\n      <\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ============ SECTION 01 \u2014 CONTROLLER IDENTITY ============ -->\n<section class=\"section\" id=\"section-01\">\n  <div class=\"wrap-narrow\">\n    <div class=\"sec-head\" data-reveal>\n      <div class=\"sec-num\">01 \u00b7 Who We Are \u00b7 Data Controller Identity<\/div>\n      <h2>The data <em>controller<\/em> \u2014 Othello International.<\/h2>\n      <p class=\"sec-lead\">Othello International is the <strong>data controller<\/strong> for personal data collected and processed under this Privacy Policy. The substantive contact details, regulatory anchor, and substantive contact channels for privacy queries are documented below. <em>For privacy queries, see Section 11 \u00b7 Changes &amp; Contact<\/em> for the substantive routing.<\/p>\n    <\/div>\n\n    <div class=\"body\" data-reveal>\n      <p>Othello International is a Bangkok-domiciled institutional bilingual translation, interpretation, and ESG advisory firm operating from Sathon CBD, Bangkok, Thailand. <strong>The firm is registered in Thailand and primarily regulated under Thai data-protection law<\/strong> \u2014 the Personal Data Protection Act B.E. 2562 (Thai PDPA), effective 1 June 2022, supervised by the Personal Data Protection Committee (PDPC) under the Ministry of Digital Economy and Society (MDES). <em>For European-language engagements and EU-domiciled client matters, EU GDPR applies as the substantive primary anchor<\/em> \u2014 Othello does not have a separate EU establishment but processes EU personal data in the course of providing translation and advisory services to EU-domiciled clients, EU subsidiaries of Thai parents, and Thai subsidiaries of EU parents. The substantive controller-processor framework for institutional engagements is set out in the engagement-letter framework, with NDA discipline applied from first email contact.<\/p>\n    <\/div>\n\n    <div class=\"controller-grid\" data-reveal-stagger>\n      <div class=\"ctrl-card\">\n        <div class=\"ctrl-k\">Controller Details<\/div>\n        <h3>Othello International<\/h3>\n        <ul class=\"ctrl-list\">\n          <li class=\"ctrl-row\"><span class=\"crk\">Legal name<\/span><span class=\"crv\"><b>Othello International<\/b><\/span><\/li>\n          <li class=\"ctrl-row\"><span class=\"crk\">Address<\/span><span class=\"crv\">Unit 12-03, Chartered Square, <b>152 N Sathon Rd<\/b>, Si Lom, Bang Rak, <b>Bangkok 10500<\/b><\/span><\/li>\n          <li class=\"ctrl-row\"><span class=\"crk\">Jurisdiction<\/span><span class=\"crv\"><b>Thailand<\/b> \u00b7 Bangkok-domiciled<\/span><\/li>\n          <li class=\"ctrl-row\"><span class=\"crk\">Email<\/span><span class=\"crv\"><a href=\"mailto:info@othelloshop.com\">info@othelloshop.com<\/a><\/span><\/li>\n          <li class=\"ctrl-row\"><span class=\"crk\">Phone<\/span><span class=\"crv\"><a href=\"tel:+6628592145\"><b>+66 02-859-2145<\/b><\/a><\/span><\/li>\n          <li class=\"ctrl-row\"><span class=\"crk\">Hours<\/span><span class=\"crv\">Bangkok office hours \u00b7 ICT (UTC+7)<\/span><\/li>\n        <\/ul>\n      <\/div>\n      <div class=\"ctrl-card\">\n        <div class=\"ctrl-k\">Regulatory Framework<\/div>\n        <h3>Thai PDPA \u00b7 EU GDPR \u00b7 regional<\/h3>\n        <ul class=\"ctrl-list\">\n          <li class=\"ctrl-row\"><span class=\"crk\">Thai PDPA<\/span><span class=\"crv\"><b>Personal Data Protection Act B.E. 2562<\/b> \u00b7 effective 1 June 2022 \u00b7 PDPC under MDES<\/span><\/li>\n          <li class=\"ctrl-row\"><span class=\"crk\">EU GDPR<\/span><span class=\"crv\"><b>Regulation (EU) 2016\/679<\/b> \u00b7 effective 25 May 2018 \u00b7 applies to EU-domiciled matters<\/span><\/li>\n          <li class=\"ctrl-row\"><span class=\"crk\">Indonesia<\/span><span class=\"crv\">UU PDP \u00b7 Law No. 27 of 2022 \u00b7 fully effective Oct 2024<\/span><\/li>\n          <li class=\"ctrl-row\"><span class=\"crk\">Vietnam<\/span><span class=\"crv\">PDPD \u00b7 Decree 13\/2023 \u00b7 effective 1 July 2023<\/span><\/li>\n          <li class=\"ctrl-row\"><span class=\"crk\">Other ASEAN<\/span><span class=\"crv\">Singapore PDPA \u00b7 Malaysia PDPA \u00b7 Philippines DPA \u00b7 HK PDPO \u00b7 Japan APPI as applicable<\/span><\/li>\n          <li class=\"ctrl-row\"><span class=\"crk\">Privacy queries<\/span><span class=\"crv\"><a href=\"mailto:info@othelloshop.com?subject=Privacy%20%E2%80%94%20Data%20Subject%20Query\">info@othelloshop.com<\/a> \u00b7 subject &#8220;Privacy \u2014&#8221;<\/span><\/li>\n        <\/ul>\n      <\/div>\n    <\/div>\n\n    <p style=\"font-size:13px;line-height:1.7;color:var(--w2);margin:24px 0 0;font-family:var(--m);letter-spacing:.02em;max-width:88ch;padding:16px 20px;background:var(--k1);border:1px solid var(--line);border-left:3px solid var(--r)\" data-reveal>\u2605 <b style=\"color:var(--r)\">CONTROLLER-PROCESSOR FRAMEWORK<\/b> \u00b7 <b style=\"color:var(--w)\">For institutional engagement-letter clients, Othello may act as data controller (for its own scoping and BD data) and\/or as data processor (for substantive client content provided for translation)<\/b>. The controller-processor framework is set out in the engagement-letter framework on a per-engagement basis, with NDA discipline applied from first email contact and substantive content protection under the engagement-letter chain.<\/p>\n  <\/div>\n<\/section>\n\n<!-- ============ SECTION 02 \u2014 DATA CATEGORIES ============ -->\n<section class=\"section alt\" id=\"section-02\">\n  <div class=\"wrap-narrow\">\n    <div class=\"sec-head\" data-reveal>\n      <div class=\"sec-num\">02 \u00b7 Data Categories Collected<\/div>\n      <h2>What data <em>we collect.<\/em> Six substantive categories.<\/h2>\n      <p class=\"sec-lead\">Othello collects personal data across <strong>six substantive categories<\/strong>, each tied to a specific operational purpose. <em>The categories below are exhaustive for institutional engagement workflows<\/em>; ancillary data (e.g. job applicant data, employee data) is governed by separate internal privacy notices on a need-to-know basis. Substantive client content (engagement-protected) is treated under the engagement-letter NDA framework, not under this Privacy Policy&#8217;s general public-data framework.<\/p>\n    <\/div>\n\n    <div class=\"dc-grid\" data-reveal-stagger>\n      <div class=\"dc-card\">\n        <div class=\"dc-num\">CATEGORY 01<\/div>\n        <h4>Scoping intake data<\/h4>\n        <p><strong>Data submitted via initial contact<\/strong> \u2014 name, email, phone, employer, role, substantive engagement context (sector, language combination, deliverable type, target timeline). Collected via email, contact form, scheduled call, RFP submission. <em>NDA-protected from first email under Othello&#8217;s standard scoping discipline.<\/em><\/p>\n        <div class=\"dc-meta\"><span class=\"dc-tag r\">NDA-FIRST<\/span><span class=\"dc-tag\">SCOPING<\/span><\/div>\n      <\/div>\n      <div class=\"dc-card\">\n        <div class=\"dc-num\">CATEGORY 02<\/div>\n        <h4>Engagement-letter data<\/h4>\n        <p><strong>Data recorded at engagement-letter execution<\/strong> \u2014 signatory details, billing contact, deliverable schedule, NDA chain documentation, partner-routed engagement records (where applicable). Retained as part of the engagement-letter audit-trail at Bangkok. <em>One audit-trail file per engagement, retained for 6 years post engagement-letter conclusion.<\/em><\/p>\n        <div class=\"dc-meta\"><span class=\"dc-tag r\">ENG. LETTER<\/span><span class=\"dc-tag\">6-YEAR<\/span><\/div>\n      <\/div>\n      <div class=\"dc-card\">\n        <div class=\"dc-num\">CATEGORY 03<\/div>\n        <h4>Substantive client content<\/h4>\n        <p><strong>Substantive content provided for translation, interpretation, or ESG advisory<\/strong> \u2014 may include personal data within client documents (board materials, BEI\/SET disclosures, M&amp;A contracts, arbitration pleadings, etc.). <em>Treated under the engagement-letter NDA framework<\/em>; processing as data processor on behalf of the client controller.<\/p>\n        <div class=\"dc-meta\"><span class=\"dc-tag r\">PROCESSOR<\/span><span class=\"dc-tag\">NDA-BOUND<\/span><\/div>\n      <\/div>\n      <div class=\"dc-card\">\n        <div class=\"dc-num\">CATEGORY 04<\/div>\n        <h4>Termbase governance data<\/h4>\n        <p><strong>Engagement-specific terminology and translation memory consolidated under the bench&#8217;s 10-year termbase<\/strong>. <em>Substantive client-specific terminology is segmented per engagement<\/em> \u2014 not shared across clients, not used for ML training. The termbase is bench-direct governance, not partner-direct.<\/p>\n        <div class=\"dc-meta\"><span class=\"dc-tag r\">10-YEAR<\/span><span class=\"dc-tag\">SEGMENTED<\/span><\/div>\n      <\/div>\n      <div class=\"dc-card\">\n        <div class=\"dc-num\">CATEGORY 05<\/div>\n        <h4>Website &amp; analytics data<\/h4>\n        <p><strong>Visitor data collected via the website<\/strong> \u2014 IP address (truncated), user agent, referrer, page views, session duration. Cookies set per the <a href=\"\/cookies\/\">Cookies Notice<\/a>. <em>No cross-site tracking, no third-party advertising cookies, no fingerprinting.<\/em><\/p>\n        <div class=\"dc-meta\"><span class=\"dc-tag\">WEBSITE<\/span><span class=\"dc-tag\">COOKIES<\/span><\/div>\n      <\/div>\n      <div class=\"dc-card\">\n        <div class=\"dc-num\">CATEGORY 06<\/div>\n        <h4>Business communication data<\/h4>\n        <p><strong>Email correspondence, calendar entries, call records for institutional BD and engagement management<\/strong>. <em>Bangkok-domiciled communication infrastructure<\/em> with engagement-letter-tier NDA discipline. No consumer messaging app routing for substantive content.<\/p>\n        <div class=\"dc-meta\"><span class=\"dc-tag\">EMAIL<\/span><span class=\"dc-tag\">CALENDAR<\/span><\/div>\n      <\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<style>\n\/* ============ SECTION 03 \u2014 LEGAL BASES \u00b7 RED PRIMARY ============ *\/\n.oth-pp .lb-grid{display:grid;grid-template-columns:repeat(2,1fr);gap:14px;margin-top:24px}\n.oth-pp .lb-card{background:var(--k2);border:1px solid var(--line);padding:26px 28px;position:relative;overflow:hidden;transition:all .35s var(--ease);display:grid;grid-template-columns:auto 1fr;gap:18px;align-items:start}\n.oth-pp .lb-card::before{content:\"\";position:absolute;top:0;left:0;width:3px;height:100%;background:var(--r);transition:width .3s var(--ease)}\n.oth-pp .lb-card:hover::before{width:5px}\n.oth-pp .lb-card:hover{background:var(--k3);border-color:rgba(237,64,54,.3);transform:translateY(-3px);box-shadow:0 12px 30px rgba(0,0,0,.4)}\n.oth-pp .lb-badge{width:48px;height:48px;background:rgba(237,64,54,.08);border:1px solid rgba(237,64,54,.30);display:flex;align-items:center;justify-content:center;font-family:var(--d);font-style:italic;font-size:18px;font-weight:600;color:var(--r);border-radius:8px;transition:all .3s var(--ease)}\n.oth-pp .lb-card:hover .lb-badge{transform:scale(1.1) rotate(-5deg);background:rgba(237,64,54,.15);border-color:rgba(237,64,54,.5)}\n.oth-pp .lb-body{flex:1}\n.oth-pp .lb-num{font-family:var(--m);font-size:9.5px;letter-spacing:.14em;text-transform:uppercase;color:var(--r);font-weight:700;margin-bottom:4px}\n.oth-pp .lb-card h4{font-family:var(--d);font-style:italic;font-size:18px;font-weight:600;color:var(--w);margin:0 0 8px;letter-spacing:-.005em;line-height:1.2}\n.oth-pp .lb-card p{font-size:13px;line-height:1.65;color:var(--w1);margin:0 0 10px}\n.oth-pp .lb-card p strong{color:var(--w);font-weight:600}\n.oth-pp .lb-card p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n\/* Legal citation pill \u00b7 RED (was gold) *\/\n.oth-pp .lb-legal{font-family:var(--m);font-size:10.5px;color:var(--r);font-weight:600;padding:6px 10px;background:rgba(237,64,54,.08);border:1px solid rgba(237,64,54,.25);border-radius:2px;letter-spacing:.04em;display:inline-block;margin-top:4px}\n\n\/* ============ SECTION 04 \u2014 RETENTION \u00b7 RED PRIMARY (period pills + footnote flipped from gold) ============ *\/\n.oth-pp .ret-table{background:var(--k2);border:1px solid var(--line);overflow:hidden;margin-top:24px}\n.oth-pp .ret-row{display:grid;grid-template-columns:200px 1fr 140px;gap:24px;padding:18px 26px;border-bottom:1px solid var(--line);align-items:center;transition:background .25s}\n.oth-pp .ret-row:last-child{border-bottom:none}\n.oth-pp .ret-row.head{background:var(--k1);font-family:var(--m);font-size:10px;letter-spacing:.14em;text-transform:uppercase;color:var(--w2);font-weight:700;padding:14px 26px}\n.oth-pp .ret-row.head:hover{background:var(--k1)}\n.oth-pp .ret-row:not(.head):hover{background:var(--k3)}\n.oth-pp .ret-cat{font-family:var(--d);font-style:italic;font-size:15px;font-weight:600;color:var(--w);line-height:1.3}\n.oth-pp .ret-cat .crn{font-family:var(--m);font-style:normal;font-size:9.5px;color:var(--r);font-weight:700;letter-spacing:.10em;display:block;margin-bottom:3px;text-transform:uppercase}\n.oth-pp .ret-desc{font-size:13px;line-height:1.6;color:var(--w1)}\n.oth-pp .ret-desc b{color:var(--w);font-weight:600}\n.oth-pp .ret-desc em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n\/* Retention period pill \u00b7 RED (was gold) *\/\n.oth-pp .ret-period{font-family:var(--m);font-size:11px;font-weight:700;color:var(--r);text-align:right;letter-spacing:.04em;padding:5px 10px;background:rgba(237,64,54,.08);border:1px solid rgba(237,64,54,.25);border-radius:2px;line-height:1.3;text-transform:uppercase}\n\n\/* ============ SECTION 05 \u2014 SHARING \u00b7 RED PRIMARY (Partner-routed card flipped from gold variant) ============ *\/\n.oth-pp .sh-grid{display:grid;grid-template-columns:repeat(2,1fr);gap:14px;margin-top:24px}\n.oth-pp .sh-card{background:var(--k2);border:1px solid var(--line);padding:28px 30px;position:relative;overflow:hidden;transition:all .35s var(--ease);display:flex;flex-direction:column}\n.oth-pp .sh-card::before{content:\"\";position:absolute;top:0;left:0;width:4px;height:100%;background:var(--r);transition:width .3s var(--ease)}\n.oth-pp .sh-card:hover::before{width:6px}\n.oth-pp .sh-card:hover{background:var(--k3);border-color:rgba(237,64,54,.3);transform:translateY(-3px);box-shadow:0 16px 40px rgba(0,0,0,.4)}\n.oth-pp .sh-num{font-family:var(--m);font-size:9.5px;letter-spacing:.14em;text-transform:uppercase;color:var(--r);font-weight:700;margin-bottom:8px}\n.oth-pp .sh-card h4{font-family:var(--d);font-style:italic;font-size:19px;font-weight:600;color:var(--w);margin:0 0 12px;letter-spacing:-.005em;line-height:1.2}\n.oth-pp .sh-card p{font-size:13px;line-height:1.65;color:var(--w1);margin:0 0 12px;flex:1}\n.oth-pp .sh-card p strong{color:var(--w);font-weight:600}\n.oth-pp .sh-card p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n.oth-pp .sh-card p a{color:var(--r);text-decoration:none;border-bottom:1px solid rgba(237,64,54,.4)}\n.oth-pp .sh-meta{margin-top:auto;padding-top:12px;border-top:1px dashed var(--line);display:flex;flex-wrap:wrap;gap:6px}\n.oth-pp .sh-tag{font-family:var(--m);font-size:9px;letter-spacing:.04em;color:var(--w2);padding:3px 8px;background:var(--k);border:1px solid var(--line);border-radius:2px;text-transform:uppercase;font-weight:600}\n.oth-pp .sh-tag.r{color:var(--r);border-color:rgba(237,64,54,.3);background:rgba(237,64,54,.06)}\n\n@media (max-width:900px){\n  .oth-pp .lb-grid{grid-template-columns:1fr;gap:10px}\n  .oth-pp .ret-row{grid-template-columns:1fr;gap:8px;padding:16px 18px}\n  .oth-pp .ret-row.head{display:none}\n  .oth-pp .ret-period{align-self:flex-start;margin-top:4px}\n  .oth-pp .sh-grid{grid-template-columns:1fr;gap:10px}\n}\n@media (max-width:600px){\n  .oth-pp .lb-card{grid-template-columns:1fr;gap:14px;padding:22px 22px}\n  .oth-pp .lb-badge{width:42px;height:42px;font-size:16px}\n}\n<\/style>\n\n<!-- ============ SECTION 03 \u2014 LEGAL BASES ============ -->\n<section class=\"section\" id=\"section-03\">\n  <div class=\"wrap-narrow\">\n    <div class=\"sec-head\" data-reveal>\n      <div class=\"sec-num\">03 \u00b7 Legal Bases for Processing<\/div>\n      <h2>Legal bases for <em>processing.<\/em> Five operational anchors.<\/h2>\n      <p class=\"sec-lead\">Othello processes personal data on <strong>five substantive legal bases<\/strong> as set out below. The legal-basis framework aligns with both <em>Thai PDPA s.24 (lawful basis requirements)<\/em> and <em>EU GDPR Article 6 (lawfulness of processing)<\/em>. The applicable legal basis is determined per data category and per processing purpose \u2014 multiple bases may apply concurrently to a given engagement, in which case the most operationally appropriate basis is applied.<\/p>\n    <\/div>\n\n    <div class=\"lb-grid\" data-reveal-stagger>\n      <div class=\"lb-card\">\n        <div class=\"lb-badge\">01<\/div>\n        <div class=\"lb-body\">\n          <div class=\"lb-num\">BASIS 01 \u00b7 CONTRACT<\/div>\n          <h4>Contract performance<\/h4>\n          <p>Processing necessary for the <strong>performance of an engagement letter or scoping agreement<\/strong> to which the data subject is party, or to take steps prior to entering such a contract (scoping intake, NDA execution). <em>The substantive basis for engagement-letter chain processing.<\/em><\/p>\n          <span class=\"lb-legal\">PDPA s.24(3) \u00b7 GDPR Art.6(1)(b)<\/span>\n        <\/div>\n      <\/div>\n      <div class=\"lb-card\">\n        <div class=\"lb-badge\">02<\/div>\n        <div class=\"lb-body\">\n          <div class=\"lb-num\">BASIS 02 \u00b7 LEGITIMATE INTEREST<\/div>\n          <h4>Legitimate interests<\/h4>\n          <p>Processing necessary for the <strong>legitimate interests of Othello or a third party<\/strong> \u2014 institutional BD, IT security, fraud prevention, internal administrative purposes, network security. <em>Balanced against the rights and freedoms of the data subject under a legitimate-interest assessment (LIA).<\/em><\/p>\n          <span class=\"lb-legal\">PDPA s.24(5) \u00b7 GDPR Art.6(1)(f)<\/span>\n        <\/div>\n      <\/div>\n      <div class=\"lb-card\">\n        <div class=\"lb-badge\">03<\/div>\n        <div class=\"lb-body\">\n          <div class=\"lb-num\">BASIS 03 \u00b7 CONSENT<\/div>\n          <h4>Consent<\/h4>\n          <p>Processing on the basis of <strong>freely-given, specific, informed, and unambiguous consent<\/strong> \u2014 applies to optional marketing communications, newsletter subscriptions, and other non-essential processing. <em>Consent may be withdrawn at any time without affecting processing prior to withdrawal.<\/em><\/p>\n          <span class=\"lb-legal\">PDPA s.19 \u00b7 GDPR Art.6(1)(a) \/ Art.7<\/span>\n        <\/div>\n      <\/div>\n      <div class=\"lb-card\">\n        <div class=\"lb-badge\">04<\/div>\n        <div class=\"lb-body\">\n          <div class=\"lb-num\">BASIS 04 \u00b7 LEGAL OBLIGATION<\/div>\n          <h4>Legal obligation<\/h4>\n          <p>Processing necessary for <strong>compliance with a legal obligation<\/strong> to which Othello is subject \u2014 tax record retention (Thai Revenue Code), accounting record retention (Thai Civil and Commercial Code), AML\/CFT obligations where applicable, regulatory reporting obligations, court-order compliance. <em>Operationally rare but documented.<\/em><\/p>\n          <span class=\"lb-legal\">PDPA s.24(6) \u00b7 GDPR Art.6(1)(c)<\/span>\n        <\/div>\n      <\/div>\n      <div class=\"lb-card\">\n        <div class=\"lb-badge\">05<\/div>\n        <div class=\"lb-body\">\n          <div class=\"lb-num\">BASIS 05 \u00b7 VITAL INTERESTS<\/div>\n          <h4>Vital interests &amp; public interest<\/h4>\n          <p>Processing necessary to <strong>protect the vital interests of the data subject or another natural person<\/strong>, or for tasks carried out in the public interest. <em>Operationally exceptional \u2014 applies primarily in emergency contact or safety-critical interpretation contexts<\/em>, and recorded under engagement-letter exception protocols.<\/p>\n          <span class=\"lb-legal\">PDPA s.24(1),(4) \u00b7 GDPR Art.6(1)(d),(e)<\/span>\n        <\/div>\n      <\/div>\n      <div class=\"lb-card\">\n        <div class=\"lb-badge\">\u2605<\/div>\n        <div class=\"lb-body\">\n          <div class=\"lb-num\">\u2605 PROCESSOR FRAMEWORK<\/div>\n          <h4>Data processor for substantive client content<\/h4>\n          <p>For substantive client content provided for translation, interpretation, or ESG advisory, Othello acts as <strong>data processor on behalf of the client controller<\/strong>. <em>The engagement-letter framework records the controller-processor relationship<\/em>, with Othello processing solely on the client&#8217;s documented instructions under engagement-letter NDA discipline.<\/p>\n          <span class=\"lb-legal\">PDPA s.40 \u00b7 GDPR Art.28<\/span>\n        <\/div>\n      <\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ============ SECTION 04 \u2014 RETENTION ============ -->\n<section class=\"section alt\" id=\"section-04\">\n  <div class=\"wrap-narrow\">\n    <div class=\"sec-head\" data-reveal>\n      <div class=\"sec-num\">04 \u00b7 Retention Periods<\/div>\n      <h2>Retention <em>periods.<\/em> Bangkok bench-anchored audit-trail.<\/h2>\n      <p class=\"sec-lead\">Othello retains personal data for <strong>operationally-defined periods aligned to engagement-letter chain governance, regulatory obligations, and substantive client-relationship needs<\/strong>. <em>The substantive anchor is the 6-year retention period for engagement-letter audit-trail consolidation<\/em> \u2014 which aligns with Thai Civil and Commercial Code record-keeping requirements (10-year statute of limitations for contractual matters reduced to 6 years for practical engagement-letter chain governance) and EU GDPR storage limitation principle. Specific category-level retention periods are documented below.<\/p>\n    <\/div>\n\n    <div class=\"ret-table\" data-reveal>\n      <div class=\"ret-row head\"><div>Data Category<\/div><div>Substantive Purpose<\/div><div style=\"text-align:right\">Retention<\/div><\/div>\n      <div class=\"ret-row\"><div class=\"ret-cat\"><span class=\"crn\">CAT 01<\/span>Scoping intake data<\/div><div class=\"ret-desc\">Scoping content, contact data, initial engagement exploration. <em>Auto-purged if scoping does not progress to engagement-letter within 90 days, except where ongoing dialogue.<\/em><\/div><div class=\"ret-period\">90 DAYS \u00b7 OR ENG. LETTER<\/div><\/div>\n      <div class=\"ret-row\"><div class=\"ret-cat\"><span class=\"crn\">CAT 02<\/span>Engagement-letter chain<\/div><div class=\"ret-desc\"><b>Engagement-letter audit-trail file consolidated at Bangkok<\/b> \u2014 signatory data, deliverable schedule, NDA chain, partner-routed engagement records, regulatory-cycle compliance evidence. <em>Aligned to Thai CCC statute of limitations &amp; tax record retention.<\/em><\/div><div class=\"ret-period\">\u2605 6 YEARS POST-CONCLUSION<\/div><\/div>\n      <div class=\"ret-row\"><div class=\"ret-cat\"><span class=\"crn\">CAT 03<\/span>Substantive client content<\/div><div class=\"ret-desc\"><b>Client documents provided for translation\/advisory<\/b> \u2014 purged per the engagement-letter framework. Default purge at engagement-letter conclusion unless retention specifically required by client or by regulatory obligation. <em>Encrypted-at-rest during active engagement.<\/em><\/div><div class=\"ret-period\">PER ENG. LETTER \u00b7 DEFAULT PURGE<\/div><\/div>\n      <div class=\"ret-row\"><div class=\"ret-cat\"><span class=\"crn\">CAT 04<\/span>Termbase governance<\/div><div class=\"ret-desc\"><b>Engagement-specific termbase entries segmented under the bench&#8217;s 10-year termbase governance<\/b>. Substantive terminology consolidated under engagement-letter chain. Termbase entries are <em>not shared across engagements and not used for ML training<\/em>.<\/div><div class=\"ret-period\">\u2605 6 YEARS \u00b7 SEGMENTED<\/div><\/div>\n      <div class=\"ret-row\"><div class=\"ret-cat\"><span class=\"crn\">CAT 05<\/span>Website &amp; analytics<\/div><div class=\"ret-desc\">Aggregated and anonymised analytics data retained for institutional BD performance assessment. <em>Truncated-IP storage<\/em> \u00b7 no cross-site tracking \u00b7 no third-party advertising.<\/div><div class=\"ret-period\">26 MONTHS \u00b7 AGGREGATED<\/div><\/div>\n      <div class=\"ret-row\"><div class=\"ret-cat\"><span class=\"crn\">CAT 06<\/span>Business communication<\/div><div class=\"ret-desc\">Email, calendar, call records for institutional BD and engagement management. <em>Retained under Bangkok-domiciled communication infrastructure.<\/em> Linked to engagement-letter audit-trail where applicable.<\/div><div class=\"ret-period\">6 YEARS \u00b7 OR ENG. LETTER<\/div><\/div>\n      <div class=\"ret-row\"><div class=\"ret-cat\"><span class=\"crn\">SPECIAL<\/span>Tax &amp; accounting<\/div><div class=\"ret-desc\">Tax records, invoice records, accounting records under Thai Revenue Code and Thai Civil and Commercial Code requirements. <em>Retention period set by statutory obligation.<\/em><\/div><div class=\"ret-period\">5 YEARS \u00b7 STATUTORY<\/div><\/div>\n    <\/div>\n\n    <p style=\"font-size:13px;line-height:1.7;color:var(--w2);margin:24px 0 0;font-family:var(--m);letter-spacing:.02em;max-width:88ch;padding:16px 20px;background:var(--k);border:1px solid var(--line);border-left:3px solid var(--r)\" data-reveal>\u2605 <b style=\"color:var(--r)\">RETENTION AS PROCUREMENT-RELEVANT POSTURE<\/b> \u00b7 <b style=\"color:var(--w)\">The 6-year engagement-letter audit-trail retention is operationally why institutional procurement panels validate Othello&#8217;s engagement-tier posture<\/b>. <em style=\"color:var(--r);font-family:var(--d);font-style:italic\">Procurement governance \u00b7 attorney-client privilege chain \u00b7 regulatory-cycle compliance evidence \u00b7 partner-routed chain documentation<\/em> \u2014 all anchor on the audit-trail file, which is one consolidated Bangkok-retained file per engagement.<\/p>\n  <\/div>\n<\/section>\n\n<!-- ============ SECTION 05 \u2014 WHO WE SHARE WITH ============ -->\n<section class=\"section\" id=\"section-05\">\n  <div class=\"wrap-narrow\">\n    <div class=\"sec-head\" data-reveal>\n      <div class=\"sec-num\">05 \u00b7 Who We Share Data With<\/div>\n      <h2>Who we share <em>data with.<\/em> Four categories \u00b7 chain-protected.<\/h2>\n      <p class=\"sec-lead\">Othello shares personal data with <strong>four substantive recipient categories<\/strong> under the operational anchors of the engagement-letter chain. <em>The substantive anchor is the partner-routed chain protection<\/em> \u2014 for partner-routed engagements (Korean \u00b7 Chinese Simplified \u00b7 Chinese Traditional \u00b7 Lao \u00b7 Burmese \u00b7 Malay \u00b7 Vietnamese \u00b7 Khmer \u00b7 Indonesian \u00b7 French \u00b7 Spanish \u00b7 Italian), partner specialists operate under back-office NDA mirroring the engagement-letter NDA, with substantive privilege chain preservation. Othello does not sell personal data, does not share data with third-party advertisers, and does not route substantive client content to consumer LLM endpoints.<\/p>\n    <\/div>\n\n    <div class=\"sh-grid\" data-reveal-stagger>\n      <div class=\"sh-card\">\n        <div class=\"sh-num\">\u2605 CATEGORY 01 \u00b7 PARTNER SPECIALISTS<\/div>\n        <h4>Partner-routed language specialists<\/h4>\n        <p>For <a href=\"\/languages\/\">partner-routed languages<\/a> (Korean \u00b7 Chinese Simplified \u00b7 Chinese Traditional \u00b7 Lao \u00b7 Burmese \u00b7 Malay \u00b7 Vietnamese \u00b7 Khmer \u00b7 Indonesian \u00b7 French \u00b7 Spanish \u00b7 Italian), substantive content is shared with the <strong>sector-matched partner specialist selected at engagement-letter execution<\/strong>. <em>Partner operates under back-office NDA mirroring the engagement-letter NDA<\/em> \u2014 privilege chain preserved, audit-trail consolidated at Bangkok, no client-direct delivery.<\/p>\n        <div class=\"sh-meta\"><span class=\"sh-tag r\">PARTNER CHAIN<\/span><span class=\"sh-tag\">BACK-OFFICE NDA<\/span><span class=\"sh-tag\">SECTOR-MATCHED<\/span><\/div>\n      <\/div>\n      <div class=\"sh-card\">\n        <div class=\"sh-num\">CATEGORY 02 \u00b7 SERVICE PROVIDERS<\/div>\n        <h4>Service providers &amp; processors<\/h4>\n        <p>Engaged service providers operating under data processing agreements (DPAs) \u2014 <strong>hosting infrastructure, email infrastructure, accounting\/payroll, professional advisors (legal, tax, audit)<\/strong>. <em>Each service provider is contractually bound to engagement-tier confidentiality and processes only on documented instructions.<\/em> Service providers operating outside Thailand are subject to international transfer safeguards (see <a href=\"#section-06\">Section 06<\/a>).<\/p>\n        <div class=\"sh-meta\"><span class=\"sh-tag r\">DPA-BOUND<\/span><span class=\"sh-tag\">PROCESSORS<\/span><\/div>\n      <\/div>\n      <div class=\"sh-card\">\n        <div class=\"sh-num\">CATEGORY 03 \u00b7 AUTHORITIES &amp; LEGAL<\/div>\n        <h4>Regulatory authorities &amp; legal compliance<\/h4>\n        <p>Where required by <strong>court order, lawful enforcement request, or regulatory obligation<\/strong> \u2014 to Thai authorities (PDPC, BoT, SEC, AMLO, Revenue Department, court orders), EU supervisory authorities under GDPR cooperation framework, regional ASEAN data-protection authorities. <em>Disclosure is limited to what is legally compelled<\/em>, reviewed by counsel where appropriate, and notified to data subjects where legally permissible.<\/p>\n        <div class=\"sh-meta\"><span class=\"sh-tag\">LEGAL<\/span><span class=\"sh-tag\">LIMITED<\/span><\/div>\n      <\/div>\n      <div class=\"sh-card\">\n        <div class=\"sh-num\">CATEGORY 04 \u00b7 BUSINESS TRANSACTIONS<\/div>\n        <h4>Corporate transactions<\/h4>\n        <p>In the event of a <strong>merger, acquisition, reorganisation, or asset sale<\/strong>, personal data may be transferred to the successor entity under engagement-tier confidentiality and continuity-of-engagement protection. <em>Data subjects would be notified where required by applicable law<\/em>, and successor entity bound to the substantive privacy commitments documented in this Policy.<\/p>\n        <div class=\"sh-meta\"><span class=\"sh-tag\">M&amp;A CONTINUITY<\/span><\/div>\n      <\/div>\n    <\/div>\n\n    <p style=\"font-size:13px;line-height:1.7;color:var(--w2);margin:24px 0 0;font-family:var(--m);letter-spacing:.02em;max-width:88ch;padding:16px 20px;background:var(--k1);border:1px solid var(--line);border-left:3px solid var(--r)\" data-reveal>\u2605 <b style=\"color:var(--r)\">WHAT OTHELLO NEVER DOES<\/b> \u00b7 <b style=\"color:var(--w)\">Othello does not sell personal data, does not share data with third-party advertisers, does not route substantive client content to consumer LLM endpoints<\/b> (ChatGPT, Claude, Gemini, or other consumer-AI endpoints), <em style=\"color:var(--r);font-family:var(--d);font-style:italic\">does not use third-party fingerprinting<\/em>, does not engage in cross-site behavioural advertising, and does not share termbase entries across engagements or use them for ML training.<\/p>\n  <\/div>\n<\/section>\n\n<style>\n\/* ============ SECTION 06 \u2014 INTERNATIONAL TRANSFERS \u00b7 RED PRIMARY (mechanism pills flipped from gold) ============ *\/\n.oth-pp .it-grid{display:grid;grid-template-columns:repeat(2,1fr);gap:14px;margin-top:24px}\n.oth-pp .it-card{background:var(--k2);border:1px solid var(--line);padding:28px 30px;position:relative;overflow:hidden;transition:all .35s var(--ease)}\n.oth-pp .it-card::before{content:\"\";position:absolute;top:0;left:0;width:4px;height:100%;background:var(--r);transition:width .3s var(--ease)}\n.oth-pp .it-card:hover::before{width:6px}\n.oth-pp .it-card:hover{background:var(--k3);border-color:rgba(237,64,54,.3);transform:translateY(-3px);box-shadow:0 16px 40px rgba(0,0,0,.4)}\n.oth-pp .it-flag{display:inline-flex;align-items:center;gap:8px;font-family:var(--m);font-size:9.5px;letter-spacing:.14em;text-transform:uppercase;color:var(--r);font-weight:700;margin-bottom:10px;padding:4px 10px;background:rgba(237,64,54,.08);border:1px solid rgba(237,64,54,.25);border-radius:2px}\n.oth-pp .it-card h4{font-family:var(--d);font-style:italic;font-size:19px;font-weight:600;color:var(--w);margin:0 0 12px;letter-spacing:-.005em;line-height:1.2}\n.oth-pp .it-card h4 em{color:var(--r);font-style:italic}\n.oth-pp .it-card p{font-size:13px;line-height:1.65;color:var(--w1);margin:0 0 10px}\n.oth-pp .it-card p strong{color:var(--w);font-weight:600}\n.oth-pp .it-card p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n\/* Transfer mechanism pill \u00b7 RED (was gold) *\/\n.oth-pp .it-mech{font-family:var(--m);font-size:10.5px;color:var(--r);font-weight:600;padding:6px 10px;background:rgba(237,64,54,.08);border:1px solid rgba(237,64,54,.25);border-radius:2px;letter-spacing:.04em;display:inline-block;margin-top:4px}\n\n\/* ============ SECTION 07 \u2014 RIGHTS \u00b7 RED PRIMARY (legal pills + Supervisory Authorities block flipped from gold) ============ *\/\n.oth-pp .rights-intro{background:linear-gradient(135deg,rgba(237,64,54,.06) 0%,var(--k3) 100%);border:1px solid rgba(237,64,54,.25);padding:32px 36px;position:relative;overflow:hidden;margin-top:24px;margin-bottom:24px;transition:all .35s var(--ease)}\n.oth-pp .rights-intro::before{content:\"\";position:absolute;top:0;left:0;width:6px;height:100%;background:linear-gradient(180deg,var(--r) 0%,var(--r3) 100%)}\n.oth-pp .rights-intro p{font-size:14px;line-height:1.7;color:var(--w1);margin:0;max-width:84ch}\n.oth-pp .rights-intro p strong{color:var(--w);font-weight:600}\n.oth-pp .rights-intro p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n.oth-pp .rights-intro p a{color:var(--r);text-decoration:none;border-bottom:1px solid rgba(237,64,54,.4)}\n\n.oth-pp .rights-grid{display:grid;grid-template-columns:repeat(2,1fr);gap:12px;margin-top:24px}\n.oth-pp .right-card{background:var(--k2);border:1px solid var(--line);padding:24px 26px;position:relative;overflow:hidden;transition:all .35s var(--ease)}\n.oth-pp .right-card::before{content:\"\";position:absolute;top:0;left:0;width:3px;height:100%;background:var(--r);transition:width .3s var(--ease)}\n.oth-pp .right-card:hover::before{width:5px}\n.oth-pp .right-card:hover{background:var(--k3);border-color:rgba(237,64,54,.3);transform:translateY(-2px)}\n.oth-pp .right-card h4{font-family:var(--d);font-style:italic;font-size:17px;font-weight:600;color:var(--w);margin:0 0 8px;letter-spacing:-.005em;line-height:1.2;display:flex;align-items:baseline;gap:10px}\n.oth-pp .right-card h4 .rn{font-family:var(--m);font-style:normal;font-size:10px;font-weight:700;color:var(--r);letter-spacing:.10em;padding:3px 7px;background:rgba(237,64,54,.10);border:1px solid rgba(237,64,54,.25);border-radius:2px;text-transform:uppercase}\n.oth-pp .right-card p{font-size:12.5px;line-height:1.6;color:var(--w1);margin:0 0 8px}\n.oth-pp .right-card p strong{color:var(--w);font-weight:600}\n.oth-pp .right-card p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n\/* Rights legal citation pill \u00b7 RED (was gold) *\/\n.oth-pp .right-card .right-legal{font-family:var(--m);font-size:9.5px;color:var(--r);font-weight:600;padding:3px 8px;background:rgba(237,64,54,.06);border:1px solid rgba(237,64,54,.20);border-radius:2px;letter-spacing:.04em;display:inline-block}\n\n\/* \u2605 Supervisory Authorities block \u00b7 RED PRIMARY (flipped from gold-themed block) *\/\n.oth-pp .dpa-block{background:linear-gradient(135deg,rgba(237,64,54,.06) 0%,var(--k3) 100%);border:1px solid rgba(237,64,54,.30);padding:30px 34px;position:relative;overflow:hidden;margin-top:28px;transition:all .35s var(--ease)}\n.oth-pp .dpa-block::before{content:\"\";position:absolute;top:0;left:0;width:5px;height:100%;background:linear-gradient(180deg,var(--r) 0%,var(--r3) 100%);transition:width .35s var(--ease)}\n.oth-pp .dpa-block:hover::before{width:7px}\n.oth-pp .dpa-block:hover{border-color:rgba(237,64,54,.5);box-shadow:0 16px 40px rgba(0,0,0,.4)}\n.oth-pp .dpa-eye{font-family:var(--m);font-size:10px;letter-spacing:.14em;text-transform:uppercase;color:var(--r);font-weight:700;margin-bottom:10px;display:flex;align-items:center;gap:8px}\n.oth-pp .dpa-eye::before{content:\"\u25cf\";color:var(--r);animation:pp-pulse 2s ease-in-out infinite}\n.oth-pp .dpa-block h4{font-family:var(--d);font-style:italic;font-size:20px;font-weight:600;color:var(--w);margin:0 0 12px;letter-spacing:-.005em;line-height:1.2}\n.oth-pp .dpa-block h4 em{color:var(--r)}\n.oth-pp .dpa-block p{font-size:13.5px;line-height:1.7;color:var(--w1);margin:0 0 10px;max-width:84ch}\n.oth-pp .dpa-block p strong{color:var(--w);font-weight:600}\n.oth-pp .dpa-block p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n.oth-pp .dpa-list{display:grid;gap:6px;margin-top:14px}\n.oth-pp .dpa-row{display:grid;grid-template-columns:140px 1fr;gap:14px;padding:8px 0;border-bottom:1px dashed rgba(237,64,54,.18);font-size:12.5px;line-height:1.5}\n.oth-pp .dpa-row:last-child{border-bottom:none}\n.oth-pp .dpa-row .dprk{font-family:var(--m);font-size:10px;color:var(--r);font-weight:700;letter-spacing:.06em;text-transform:uppercase}\n.oth-pp .dpa-row .dprv{color:var(--w1)}\n.oth-pp .dpa-row .dprv b{color:var(--w);font-weight:600}\n\n@media (max-width:900px){\n  .oth-pp .it-grid{grid-template-columns:1fr;gap:10px}\n  .oth-pp .rights-grid{grid-template-columns:1fr;gap:8px}\n  .oth-pp .dpa-row{grid-template-columns:1fr;gap:4px;padding:6px 0}\n}\n@media (max-width:600px){\n  .oth-pp .dpa-block{padding:24px 22px}\n}\n<\/style>\n\n<!-- ============ SECTION 06 \u2014 INTERNATIONAL TRANSFERS ============ -->\n<section class=\"section alt\" id=\"section-06\">\n  <div class=\"wrap-narrow\">\n    <div class=\"sec-head\" data-reveal>\n      <div class=\"sec-num\">06 \u00b7 International Transfers \u00b7 Cross-Border Data Flow<\/div>\n      <h2>International <em>transfers.<\/em> Multi-jurisdiction safeguards.<\/h2>\n      <p class=\"sec-lead\">Personal data may be <strong>transferred internationally in the course of substantive engagement-letter chain processing<\/strong> \u2014 for partner-routed engagements, where partners may be domiciled outside Thailand, and for service-provider relationships where infrastructure or providers operate outside Thailand. <em>Cross-border transfers are subject to substantive safeguards documented below<\/em>, aligned to Thai PDPA cross-border transfer requirements (s.28-29), EU GDPR Chapter V (Articles 44-50) where applicable, and regional ASEAN data-protection cross-border frameworks.<\/p>\n    <\/div>\n\n    <div class=\"it-grid\" data-reveal-stagger>\n      <div class=\"it-card\">\n        <div class=\"it-flag\">\u2605 THAI PDPA \u00b7 CROSS-BORDER<\/div>\n        <h4>Thai PDPA <em>s.28-29<\/em> cross-border transfer framework<\/h4>\n        <p>Personal data transferred from Thailand to a foreign country is subject to <strong>Thai PDPA cross-border transfer requirements<\/strong>. Othello relies on substantive safeguards under s.28-29 \u2014 adequacy determination by the PDPC where available, binding corporate rules (BCRs) where applicable, standard data-protection clauses (SDPCs), explicit data-subject consent, or contractual safeguards aligned to PDPC guidance. <em>For partner-routed engagements outside Thailand, back-office NDA mirroring the engagement-letter NDA operates as a substantive contractual safeguard.<\/em><\/p>\n        <span class=\"it-mech\">PDPA s.28-29 \u00b7 SDPCs \u00b7 Adequacy<\/span>\n      <\/div>\n      <div class=\"it-card\">\n        <div class=\"it-flag\">\u2605 EU GDPR \u00b7 CHAPTER V<\/div>\n        <h4>EU GDPR <em>Chapter V<\/em> transfer framework<\/h4>\n        <p>For personal data subject to EU GDPR transferred outside the EEA (including to Thailand for Bangkok-based processing), Othello relies on <strong>GDPR Chapter V transfer mechanisms<\/strong> \u2014 Standard Contractual Clauses (SCCs \u00b7 2021 Commission Implementing Decision 2021\/914), adequacy decisions where available, derogations under Article 49 where applicable. <em>Substantive transfer impact assessments (TIAs) are conducted for European-language engagements per the Schrems II framework.<\/em><\/p>\n        <span class=\"it-mech\">GDPR Art.44-50 \u00b7 SCCs \u00b7 TIA<\/span>\n      <\/div>\n      <div class=\"it-card\">\n        <div class=\"it-flag\">REGIONAL \u00b7 INDONESIA<\/div>\n        <h4>Indonesia <em>UU PDP<\/em> \u00b7 Law No. 27 of 2022<\/h4>\n        <p>For <a href=\"\/languages\/indonesian\/\">Indonesian-language engagements<\/a>, the <strong>Indonesian UU PDP cross-border transfer framework<\/strong> applies \u2014 Indonesia&#8217;s Personal Data Protection Law (fully effective Oct 2024) restricts cross-border transfers to jurisdictions with comparable data-protection standards or under specific contractual safeguards. <em>The engagement-letter framework records substantive UU PDP compliance for Indonesian-domiciled data subjects.<\/em><\/p>\n        <span class=\"it-mech\">UU PDP \u00b7 Law No. 27 of 2022<\/span>\n      <\/div>\n      <div class=\"it-card\">\n        <div class=\"it-flag\">REGIONAL \u00b7 VIETNAM<\/div>\n        <h4>Vietnam <em>PDPD<\/em> \u00b7 Decree 13\/2023<\/h4>\n        <p>For <a href=\"\/languages\/vietnamese\/\">Vietnamese-language engagements<\/a>, the <strong>Vietnam PDPD framework<\/strong> (Decree 13\/2023 \u00b7 effective 1 July 2023) applies. Cross-border transfers require Transfer Impact Assessment (TIA) submission to the Department of Cybersecurity and High-Tech Crime Prevention (A05) under the Ministry of Public Security. <em>Engagement-letter chain documents the PDPD-aligned safeguards for Vietnamese-domiciled data subjects.<\/em><\/p>\n        <span class=\"it-mech\">PDPD \u00b7 Decree 13\/2023 \u00b7 A05 TIA<\/span>\n      <\/div>\n      <div class=\"it-card\">\n        <div class=\"it-flag\">REGIONAL \u00b7 OTHER ASEAN<\/div>\n        <h4>Singapore PDPA \u00b7 Malaysia PDPA \u00b7 Philippines DPA \u00b7 HK PDPO<\/h4>\n        <p>For <strong>other ASEAN regional engagements, applicable regional data-protection frameworks apply<\/strong> \u2014 Singapore PDPA (2012), Malaysia PDPA (2010), Philippines DPA (2012), Hong Kong PDPO, Cambodia&#8217;s emerging data-protection framework. <em>Each engagement-letter records the substantive jurisdictional framework<\/em> applied for cross-border transfer safeguards.<\/p>\n        <span class=\"it-mech\">Regional PDPAs \u00b7 Per-engagement<\/span>\n      <\/div>\n      <div class=\"it-card\">\n        <div class=\"it-flag\">\u2605 PARTNER-ROUTED CHAIN<\/div>\n        <h4>Partner-routed transfer <em>safeguards<\/em><\/h4>\n        <p>For <strong>partner-routed engagements where partner specialists are domiciled outside Thailand<\/strong>, the back-office NDA framework operates as substantive contractual safeguards. <em>Engagement-letter records partner domicile, applicable jurisdictional framework, transfer-mechanism deployed, and substantive privilege chain preservation<\/em>. The 4-part institutional discipline verification at QA sign-off includes cross-border safeguard verification.<\/p>\n        <span class=\"it-mech\">Back-office NDA \u00b7 Per-partner<\/span>\n      <\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ============ SECTION 07 \u2014 YOUR RIGHTS ============ -->\n<section class=\"section\" id=\"section-07\">\n  <div class=\"wrap-narrow\">\n    <div class=\"sec-head\" data-reveal>\n      <div class=\"sec-num\">07 \u00b7 Your Rights \u00b7 Data Subject Rights<\/div>\n      <h2>Your <em>rights.<\/em> Eight substantive rights by jurisdiction.<\/h2>\n      <p class=\"sec-lead\">Data subjects have <strong>eight substantive rights<\/strong> under the applicable data-protection frameworks, with specific anchoring varying by jurisdiction. <em>The substantive rights set out below apply to Thai PDPA data subjects, EU GDPR data subjects, and regional ASEAN data subjects with jurisdiction-specific calibration<\/em>. To exercise any right, contact Othello using the privacy query channel set out in Section 11, citing the substantive right invoked and providing identity verification proportionate to the request.<\/p>\n    <\/div>\n\n    <div class=\"rights-intro\" data-reveal>\n      <p><strong>Rights exercise procedure<\/strong>: Email <a href=\"mailto:info@othelloshop.com?subject=Privacy%20%E2%80%94%20Data%20Subject%20Rights%20Request\">info@othelloshop.com<\/a> with subject prefix &#8220;Privacy \u2014 Data Subject Rights Request&#8221; specifying the substantive right invoked and the substantive engagement or data category. <em>Othello responds within 30 days under Thai PDPA s.30 and within 1 month under EU GDPR Article 12(3), with extension permitted for complex requests<\/em>. Identity verification proportionate to the request is required. <strong>No fee for the first request in a 12-month period<\/strong>; reasonable fee may apply for excessive or repetitive requests under PDPA s.30(2) and GDPR Art.12(5).<\/p>\n    <\/div>\n\n    <div class=\"rights-grid\" data-reveal-stagger>\n      <div class=\"right-card\">\n        <h4><span class=\"rn\">RIGHT 01<\/span>Right of access<\/h4>\n        <p><strong>Right to confirm whether Othello processes your personal data<\/strong>, and to obtain a copy of that data plus supplementary information (purposes, categories, recipients, retention, sources, automated decision-making). <em>Verification proportionate to request.<\/em><\/p>\n        <span class=\"right-legal\">PDPA s.30 \u00b7 GDPR Art.15<\/span>\n      <\/div>\n      <div class=\"right-card\">\n        <h4><span class=\"rn\">RIGHT 02<\/span>Right to rectification<\/h4>\n        <p><strong>Right to have inaccurate personal data corrected<\/strong>, and to have incomplete data completed (including by means of providing a supplementary statement). <em>Othello will action rectification without undue delay and notify recipients where applicable.<\/em><\/p>\n        <span class=\"right-legal\">PDPA s.36 \u00b7 GDPR Art.16<\/span>\n      <\/div>\n      <div class=\"right-card\">\n        <h4><span class=\"rn\">RIGHT 03<\/span>Right to erasure<\/h4>\n        <p><strong>Right to have personal data erased<\/strong> (&#8220;right to be forgotten&#8221;) where the data is no longer necessary, consent is withdrawn, processing is unlawful, or other grounds apply. <em>Subject to legal obligation, contract performance, or legitimate interest overrides.<\/em><\/p>\n        <span class=\"right-legal\">PDPA s.33 \u00b7 GDPR Art.17<\/span>\n      <\/div>\n      <div class=\"right-card\">\n        <h4><span class=\"rn\">RIGHT 04<\/span>Right to restrict processing<\/h4>\n        <p><strong>Right to restrict processing<\/strong> in specific circumstances (contested accuracy, unlawful processing where erasure is opposed, data no longer needed but required for legal claims, objection pending). <em>Restricted data may only be processed with consent or for legal claims.<\/em><\/p>\n        <span class=\"right-legal\">PDPA s.34 \u00b7 GDPR Art.18<\/span>\n      <\/div>\n      <div class=\"right-card\">\n        <h4><span class=\"rn\">RIGHT 05<\/span>Right to data portability<\/h4>\n        <p><strong>Right to receive personal data in a structured, commonly-used, machine-readable format<\/strong>, and to transmit that data to another controller. <em>Applies to data processed on the basis of consent or contract performance, and processed by automated means.<\/em><\/p>\n        <span class=\"right-legal\">PDPA s.31 \u00b7 GDPR Art.20<\/span>\n      <\/div>\n      <div class=\"right-card\">\n        <h4><span class=\"rn\">RIGHT 06<\/span>Right to object<\/h4>\n        <p><strong>Right to object to processing<\/strong> based on legitimate interests, public interest, or for direct marketing purposes. <em>For direct marketing objection, processing ceases immediately<\/em>; for other objections, Othello assesses whether compelling legitimate grounds override.<\/p>\n        <span class=\"right-legal\">PDPA s.32 \u00b7 GDPR Art.21<\/span>\n      <\/div>\n      <div class=\"right-card\">\n        <h4><span class=\"rn\">RIGHT 07<\/span>Right to withdraw consent<\/h4>\n        <p><strong>Right to withdraw consent at any time<\/strong> where processing is based on consent \u2014 without affecting the lawfulness of processing prior to withdrawal. <em>Withdrawal is as easy as giving consent<\/em>; processing on alternative legal bases may continue where applicable.<\/p>\n        <span class=\"right-legal\">PDPA s.19 \u00b7 GDPR Art.7(3)<\/span>\n      <\/div>\n      <div class=\"right-card\">\n        <h4><span class=\"rn\">RIGHT 08<\/span>Right to lodge a complaint<\/h4>\n        <p><strong>Right to lodge a complaint with the relevant supervisory authority<\/strong> \u2014 PDPC (Thailand \u00b7 primary), the relevant EU supervisory authority under GDPR (for EU data subjects), or the relevant regional ASEAN data-protection authority. <em>Othello encourages prior contact<\/em> to resolve concerns directly where possible.<\/p>\n        <span class=\"right-legal\">PDPA s.73 \u00b7 GDPR Art.77<\/span>\n      <\/div>\n    <\/div>\n\n    <div class=\"dpa-block\" data-reveal>\n      <div class=\"dpa-eye\">SUPERVISORY AUTHORITIES \u00b7 COMPLAINT ROUTING<\/div>\n      <h4>Supervisory authority <em>routing<\/em> by jurisdiction.<\/h4>\n      <p>Data subjects retain the substantive right to <strong>lodge a complaint directly with the supervisory authority of their habitual residence, place of work, or place of alleged infringement<\/strong>. The substantive supervisory authorities relevant to Othello&#8217;s engagement footprint are documented below. <em>Othello encourages prior contact<\/em> to enable direct resolution where possible \u2014 but the right to authority complaint is not contingent on prior contact.<\/p>\n      <div class=\"dpa-list\">\n        <div class=\"dpa-row\"><span class=\"dprk\">Thailand<\/span><span class=\"dprv\"><b>Personal Data Protection Committee (PDPC)<\/b> under the Ministry of Digital Economy and Society (MDES) \u00b7 Bangkok<\/span><\/div>\n        <div class=\"dpa-row\"><span class=\"dprk\">EU \/ EEA<\/span><span class=\"dprv\"><b>The relevant EU supervisory authority<\/b> for the data subject&#8217;s habitual residence, place of work, or place of alleged infringement under GDPR Art.77<\/span><\/div>\n        <div class=\"dpa-row\"><span class=\"dprk\">Indonesia<\/span><span class=\"dprv\">UU PDP supervisory authority (under formation pursuant to Law No. 27 of 2022, Kementerian Komunikasi dan Digital \u00b7 interim oversight)<\/span><\/div>\n        <div class=\"dpa-row\"><span class=\"dprk\">Vietnam<\/span><span class=\"dprv\">Department of Cybersecurity and High-Tech Crime Prevention (A05) \u00b7 Ministry of Public Security<\/span><\/div>\n        <div class=\"dpa-row\"><span class=\"dprk\">Singapore<\/span><span class=\"dprv\">Personal Data Protection Commission (PDPC Singapore)<\/span><\/div>\n        <div class=\"dpa-row\"><span class=\"dprk\">Malaysia<\/span><span class=\"dprv\">Department of Personal Data Protection (JPDP)<\/span><\/div>\n        <div class=\"dpa-row\"><span class=\"dprk\">Hong Kong<\/span><span class=\"dprv\">Office of the Privacy Commissioner for Personal Data (PCPD)<\/span><\/div>\n        <div class=\"dpa-row\"><span class=\"dprk\">Japan<\/span><span class=\"dprv\">Personal Information Protection Commission (PPC) \u00b7 individual.gov<\/span><\/div>\n      <\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<style>\n\/* ============ SECTION 08 \u2014 COOKIES \u00b7 RED ============ *\/\n.oth-pp .ck-block{background:var(--k2);border:1px solid var(--line);padding:32px 36px;position:relative;overflow:hidden;margin-top:24px;transition:all .35s var(--ease)}\n.oth-pp .ck-block::before{content:\"\";position:absolute;top:0;left:0;width:5px;height:100%;background:linear-gradient(180deg,var(--r) 0%,var(--r3) 100%)}\n.oth-pp .ck-block:hover{background:var(--k3);border-color:rgba(237,64,54,.3);box-shadow:0 16px 40px rgba(0,0,0,.4)}\n.oth-pp .ck-block h4{font-family:var(--d);font-style:italic;font-size:22px;font-weight:600;color:var(--w);margin:0 0 12px;letter-spacing:-.005em;line-height:1.2}\n.oth-pp .ck-block h4 em{color:var(--r)}\n.oth-pp .ck-block p{font-size:14px;line-height:1.7;color:var(--w1);margin:0 0 14px;max-width:84ch}\n.oth-pp .ck-block p strong{color:var(--w);font-weight:600}\n.oth-pp .ck-block p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n.oth-pp .ck-block p a{color:var(--r);text-decoration:none;border-bottom:1px solid rgba(237,64,54,.4)}\n.oth-pp .ck-link{display:inline-flex;align-items:center;gap:10px;padding:13px 24px;background:rgba(237,64,54,.10);border:1px solid rgba(237,64,54,.40);color:var(--r1);font-family:var(--m);font-size:11.5px;letter-spacing:.10em;text-transform:uppercase;text-decoration:none;font-weight:700;border-radius:4px;margin-top:8px;transition:all .3s var(--ease)}\n.oth-pp .ck-link:hover{background:var(--r);color:var(--w);border-color:var(--r);transform:translateY(-2px);box-shadow:0 8px 24px rgba(237,64,54,.3)}\n.oth-pp .ck-link::after{content:\"\u2192\";font-family:var(--d);font-style:italic;font-size:15px;transition:transform .3s var(--ease)}\n.oth-pp .ck-link:hover::after{transform:translateX(4px)}\n\n\/* ============ SECTION 09 \u2014 SECURITY \u00b7 RED ============ *\/\n.oth-pp .sec-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:14px;margin-top:24px}\n.oth-pp .sec-card{background:var(--k2);border:1px solid var(--line);padding:26px 26px;position:relative;overflow:hidden;transition:all .35s var(--ease);display:flex;flex-direction:column}\n.oth-pp .sec-card::before{content:\"\";position:absolute;top:0;left:0;width:3px;height:100%;background:var(--r);transition:width .3s var(--ease)}\n.oth-pp .sec-card:hover::before{width:5px}\n.oth-pp .sec-card:hover{background:var(--k3);border-color:rgba(237,64,54,.3);transform:translateY(-3px);box-shadow:0 12px 30px rgba(0,0,0,.4)}\n.oth-pp .sec-icon{width:42px;height:42px;background:rgba(237,64,54,.08);border:1px solid rgba(237,64,54,.30);border-radius:8px;display:flex;align-items:center;justify-content:center;margin-bottom:14px;transition:all .3s var(--ease)}\n.oth-pp .sec-card:hover .sec-icon{background:rgba(237,64,54,.15);border-color:rgba(237,64,54,.5);transform:scale(1.1) rotate(-5deg)}\n.oth-pp .sec-icon svg{width:20px;height:20px;stroke:var(--r);fill:none;stroke-width:1.8;stroke-linecap:round;stroke-linejoin:round}\n.oth-pp .sec-card h4{font-family:var(--d);font-style:italic;font-size:17px;font-weight:600;color:var(--w);margin:0 0 8px;letter-spacing:-.005em;line-height:1.2}\n.oth-pp .sec-card p{font-size:12.5px;line-height:1.65;color:var(--w1);margin:0;flex:1}\n.oth-pp .sec-card p strong{color:var(--w);font-weight:600}\n.oth-pp .sec-card p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n\n\/* ============ SECTION 10 \u2014 CHILDREN \u00b7 RED ============ *\/\n.oth-pp .ch-block{background:linear-gradient(135deg,rgba(237,64,54,.04) 0%,var(--k2) 100%);border:1px solid var(--line);padding:32px 36px;position:relative;overflow:hidden;margin-top:24px;transition:all .35s var(--ease)}\n.oth-pp .ch-block::before{content:\"\";position:absolute;top:0;left:0;width:5px;height:100%;background:var(--r);transition:width .3s var(--ease)}\n.oth-pp .ch-block:hover::before{width:7px}\n.oth-pp .ch-block h4{font-family:var(--d);font-style:italic;font-size:22px;font-weight:600;color:var(--w);margin:0 0 12px;letter-spacing:-.005em;line-height:1.2}\n.oth-pp .ch-block h4 em{color:var(--r)}\n.oth-pp .ch-block p{font-size:14px;line-height:1.7;color:var(--w1);margin:0 0 14px;max-width:84ch}\n.oth-pp .ch-block p strong{color:var(--w);font-weight:600}\n.oth-pp .ch-block p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n\n\/* ============ SECTION 11 \u2014 CHANGES & CONTACT \u00b7 RED PRIMARY (no gold variant) ============ *\/\n.oth-pp .cc-grid{display:grid;grid-template-columns:1fr 1fr;gap:18px;margin-top:24px}\n.oth-pp .cc-card{background:var(--k2);border:1px solid var(--line);padding:30px 32px;position:relative;overflow:hidden;transition:all .35s var(--ease)}\n.oth-pp .cc-card::before{content:\"\";position:absolute;top:0;left:0;width:4px;height:100%;background:var(--r);transition:width .3s var(--ease)}\n.oth-pp .cc-card:hover::before{width:6px}\n.oth-pp .cc-card:hover{background:var(--k3);border-color:rgba(237,64,54,.3);transform:translateY(-3px);box-shadow:0 16px 40px rgba(0,0,0,.4)}\n.oth-pp .cc-k{font-family:var(--m);font-size:10px;letter-spacing:.14em;text-transform:uppercase;color:var(--r);font-weight:700;margin-bottom:10px}\n.oth-pp .cc-card h4{font-family:var(--d);font-style:italic;font-size:20px;font-weight:600;color:var(--w);margin:0 0 12px;letter-spacing:-.005em;line-height:1.2}\n.oth-pp .cc-card h4 em{color:var(--r)}\n.oth-pp .cc-card p{font-size:13.5px;line-height:1.65;color:var(--w1);margin:0 0 12px}\n.oth-pp .cc-card p strong{color:var(--w);font-weight:600}\n.oth-pp .cc-card p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n.oth-pp .cc-card p a{color:var(--r);text-decoration:none;border-bottom:1px solid rgba(237,64,54,.4)}\n\n@media (max-width:900px){\n  .oth-pp .sec-grid{grid-template-columns:1fr;gap:10px}\n  .oth-pp .cc-grid{grid-template-columns:1fr;gap:14px}\n}\n@media (max-width:600px){\n  .oth-pp .ck-block,.oth-pp .ch-block{padding:24px 24px}\n  .oth-pp .ck-block h4,.oth-pp .ch-block h4{font-size:18px}\n  .oth-pp .cc-card{padding:24px 24px}\n}\n<\/style>\n\n<!-- ============ SECTION 08 \u2014 COOKIES ============ -->\n<section class=\"section alt\" id=\"section-08\">\n  <div class=\"wrap-narrow\">\n    <div class=\"sec-head\" data-reveal>\n      <div class=\"sec-num\">08 \u00b7 Cookies &amp; Analytics<\/div>\n      <h2>Cookies <em>&amp; analytics.<\/em> Minimal \u00b7 transparent \u00b7 cross-linked.<\/h2>\n      <p class=\"sec-lead\">Othello uses a <strong>minimal, transparent set of cookies<\/strong> on the website to support essential functionality, analytics, and engagement performance assessment. <em>No third-party advertising cookies, no cross-site tracking, no fingerprinting<\/em>. The substantive cookies framework, category breakdown, retention periods, and opt-out mechanisms are documented separately at the Cookies Notice cross-linked below.<\/p>\n    <\/div>\n\n    <div class=\"ck-block\" data-reveal>\n      <h4>Cookies <em>policy summary<\/em><\/h4>\n      <p>Othello uses three substantive cookie categories: <strong>strictly necessary cookies<\/strong> (essential for website functionality \u00b7 no consent required), <strong>analytics cookies<\/strong> (institutional BD performance assessment \u00b7 truncated-IP storage \u00b7 26-month retention \u00b7 consent-based for non-essential analytics), and <strong>preference cookies<\/strong> (language preference, theme preference \u00b7 consent-based). <em>No third-party advertising cookies, no behavioural tracking, no fingerprinting.<\/em> The substantive consent banner appears on first visit; granular consent management is available via the cookie preference centre.<\/p>\n      <a href=\"\/cookies\/\" class=\"ck-link\">Open Full Cookies Notice<\/a>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ============ SECTION 09 \u2014 SECURITY ============ -->\n<section class=\"section\" id=\"section-09\">\n  <div class=\"wrap-narrow\">\n    <div class=\"sec-head\" data-reveal>\n      <div class=\"sec-num\">09 \u00b7 Security Commitments<\/div>\n      <h2>Security <em>commitments.<\/em> Six operational anchors.<\/h2>\n      <p class=\"sec-lead\">Othello applies <strong>six operational security commitments<\/strong> to safeguard personal data \u2014 aligned to Thai PDPA s.37 (appropriate security measures) and EU GDPR Article 32 (security of processing). <em>The substantive operational anchor is engagement-letter NDA discipline applied through the chain<\/em> \u2014 from first email scoping through partner-routed production through Bangkok bench QA sign-off and audit-trail consolidation. The substantive security framework is documented in detail at <a href=\"\/data-security\/\">Data Security<\/a>.<\/p>\n    <\/div>\n\n    <div class=\"sec-grid\" data-reveal-stagger>\n      <div class=\"sec-card\">\n        <div class=\"sec-icon\"><svg viewBox=\"0 0 24 24\"><rect x=\"3\" y=\"11\" width=\"18\" height=\"11\" rx=\"2\"\/><path d=\"M7 11V7a5 5 0 0 1 10 0v4\"\/><\/svg><\/div>\n        <h4>Encryption at rest &amp; in transit<\/h4>\n        <p><strong>Substantive client content encrypted at rest during active engagement<\/strong> and in transit between scoping, production, and delivery. <em>TLS 1.2+ for transport, AES-256 equivalent for at-rest where applicable<\/em>.<\/p>\n      <\/div>\n      <div class=\"sec-card\">\n        <div class=\"sec-icon\"><svg viewBox=\"0 0 24 24\"><path d=\"M16 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2\"\/><circle cx=\"8.5\" cy=\"7\" r=\"4\"\/><line x1=\"20\" y1=\"8\" x2=\"20\" y2=\"14\"\/><line x1=\"23\" y1=\"11\" x2=\"17\" y2=\"11\"\/><\/svg><\/div>\n        <h4>Access control &amp; need-to-know<\/h4>\n        <p><strong>Access to substantive client content limited to engagement-letter chain participants<\/strong> on a need-to-know basis. <em>Bangkok bench access for in-house engagements; partner specialist access under back-office NDA for partner-routed<\/em>.<\/p>\n      <\/div>\n      <div class=\"sec-card\">\n        <div class=\"sec-icon\"><svg viewBox=\"0 0 24 24\"><circle cx=\"12\" cy=\"12\" r=\"10\"\/><path d=\"M9 12l2 2 4-4\"\/><\/svg><\/div>\n        <h4>NDA-from-first-email discipline<\/h4>\n        <p><strong>NDA discipline applied from first email scoping contact<\/strong>, before engagement-letter signature. <em>Back-office NDA mirroring the engagement-letter NDA operates through the partner-routed chain<\/em>; privilege chain preserved.<\/p>\n      <\/div>\n      <div class=\"sec-card\">\n        <div class=\"sec-icon\"><svg viewBox=\"0 0 24 24\"><path d=\"M21 11V5a2 2 0 0 0-2-2H5a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h8\"\/><path d=\"M12 11V7\"\/><path d=\"M8 7h8\"\/><circle cx=\"17\" cy=\"17\" r=\"3\"\/><\/svg><\/div>\n        <h4>No consumer LLM endpoints<\/h4>\n        <p><strong>Substantive client content never routed through consumer LLM endpoints<\/strong> (ChatGPT \u00b7 Claude \u00b7 Gemini \u00b7 etc.). <em>Engagement-letter NDA explicitly covers the no-consumer-AI-endpoint commitment across in-house and partner-routed tiers.<\/em><\/p>\n      <\/div>\n      <div class=\"sec-card\">\n        <div class=\"sec-icon\"><svg viewBox=\"0 0 24 24\"><path d=\"M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z\"\/><polyline points=\"14 2 14 8 20 8\"\/><\/svg><\/div>\n        <h4>Audit-trail consolidation<\/h4>\n        <p><strong>One Bangkok-retained audit-trail file per engagement<\/strong> \u2014 terminology decisions, revision cycles, regulatory-cycle compliance, partner-engagement records. <em>Aligned to Thai PDPA + EU GDPR + regional PDPA evidence-tier requirements.<\/em><\/p>\n      <\/div>\n      <div class=\"sec-card\">\n        <div class=\"sec-icon\"><svg viewBox=\"0 0 24 24\"><path d=\"M13 2L3 14h9l-1 8 10-12h-9l1-8z\"\/><\/svg><\/div>\n        <h4>Incident response &amp; breach notification<\/h4>\n        <p><strong>Substantive incident response framework<\/strong> for personal data breaches \u2014 assessment of breach severity, notification to PDPC within 72 hours where required (PDPA s.37(4)), GDPR Art.33 notification framework where applicable, data subject notification per applicable framework.<\/p>\n      <\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ============ SECTION 10 \u2014 CHILDREN'S PRIVACY ============ -->\n<section class=\"section alt\" id=\"section-10\">\n  <div class=\"wrap-narrow\">\n    <div class=\"sec-head\" data-reveal>\n      <div class=\"sec-num\">10 \u00b7 Children&#8217;s Privacy<\/div>\n      <h2>Children&#8217;s <em>privacy.<\/em> Service not directed to minors.<\/h2>\n      <p class=\"sec-lead\">Othello&#8217;s <strong>institutional bilingual translation, interpretation, and ESG advisory services are not directed to children<\/strong>. The substantive client base is institutional \u2014 corporate, financial, legal, and regulated-sector clients \u2014 and the substantive engagement-letter chain assumes adult institutional signatories. <em>Othello does not knowingly collect personal data from children under 20 (the Thai PDPA threshold for adult capacity for consent under s.20) or under 16 (the EU GDPR threshold for children&#8217;s consent under Art.8) without verifiable parental or guardian consent.<\/em><\/p>\n    <\/div>\n\n    <div class=\"ch-block\" data-reveal>\n      <h4>Children&#8217;s personal data <em>handling<\/em><\/h4>\n      <p>If personal data relating to a minor is provided to Othello as part of substantive client content (for example, in family-law translation contexts, immigration matters, or educational documentation), <strong>that data is treated under the engagement-letter NDA framework<\/strong> with heightened sensitivity discipline. <em>Substantive minor-related content processing is on a per-engagement basis with the engagement-letter framework recording the substantive safeguards applied.<\/em> Othello does not market services to children, does not maintain children-directed online services, and does not engage in any processing of children&#8217;s personal data outside the substantive engagement-letter framework.<\/p>\n      <p>If you believe Othello has inadvertently collected personal data from a child without appropriate parental or guardian consent, please contact <a href=\"mailto:info@othelloshop.com?subject=Privacy%20%E2%80%94%20Children%27s%20Data\">info@othelloshop.com<\/a> with subject &#8220;Privacy \u2014 Children&#8217;s Data&#8221;. <em>Such reports will be substantively investigated and any data collected without appropriate consent will be promptly erased.<\/em><\/p>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ============ SECTION 11 \u2014 CHANGES & CONTACT ============ -->\n<section class=\"section\" id=\"section-11\">\n  <div class=\"wrap-narrow\">\n    <div class=\"sec-head\" data-reveal>\n      <div class=\"sec-num\">11 \u00b7 Changes &amp; Contact<\/div>\n      <h2>Policy <em>changes &amp; contact.<\/em> Versioned \u00b7 transparent \u00b7 Bangkok-direct.<\/h2>\n      <p class=\"sec-lead\">Othello may <strong>update this Privacy Policy from time to time<\/strong> to reflect operational changes, regulatory developments, or substantive engagement-model evolution. <em>The substantive operational anchor is versioned transparency<\/em> \u2014 each update increments the version number recorded in the hero metadata, with the effective date updated. Material updates are notified to active engagement-letter clients via the engagement-letter chain.<\/p>\n    <\/div>\n\n    <div class=\"cc-grid\" data-reveal-stagger>\n      <div class=\"cc-card\">\n        <div class=\"cc-k\">POLICY CHANGES<\/div>\n        <h4>Versioning &amp; <em>change history<\/em><\/h4>\n        <p><strong>This Privacy Policy is versioned<\/strong> \u2014 current version v12.3, effective 15 May 2026. Substantive changes are recorded with version increments. <em>For institutional engagement-letter clients, material updates are notified through the engagement-letter chain<\/em> with reasonable advance notice for procurement governance review. The current version is always available at this URL; archived versions are available upon request to <a href=\"mailto:info@othelloshop.com?subject=Privacy%20%E2%80%94%20Policy%20Archive%20Request\">info@othelloshop.com<\/a>.<\/p>\n      <\/div>\n      <div class=\"cc-card\">\n        <div class=\"cc-k\">\u2605 PRIVACY CONTACT<\/div>\n        <h4>Privacy queries &amp; <em>rights requests<\/em><\/h4>\n        <p><strong>For privacy queries, data subject rights requests, or substantive engagement-letter privacy framework discussion<\/strong>: email <a href=\"mailto:info@othelloshop.com?subject=Privacy%20%E2%80%94%20Query\">info@othelloshop.com<\/a> with subject prefix &#8220;Privacy \u2014&#8221; specifying the substantive query type. <em>Response within 30 days under Thai PDPA s.30, within 1 month under EU GDPR Art.12(3)<\/em>, with extension permitted for complex requests. Phone <a href=\"tel:+6628592145\">+66 02-859-2145<\/a> during Bangkok office hours for substantive procurement-governance privacy framework discussion.<\/p>\n      <\/div>\n    <\/div>\n  <\/div>\n<\/section>\n\n<style>\n\/* ============ RELATED POLICIES \u00b7 RED PRIMARY ============ *\/\n.oth-pp .rp-sec{padding:96px 0;background:var(--k1);border-top:1px solid var(--line);position:relative;overflow:hidden}\n.oth-pp .rp-sec::before{content:\"\";position:absolute;top:30%;right:-15%;width:600px;height:600px;background:radial-gradient(circle,rgba(237,64,54,.05),transparent 70%);border-radius:50%;pointer-events:none}\n\n.oth-pp .rp-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:14px;margin-top:24px}\n.oth-pp .rp-card{background:var(--k2);border:1px solid var(--line);padding:28px 28px;text-decoration:none;color:inherit;position:relative;overflow:hidden;transition:all .35s var(--ease);display:flex;flex-direction:column}\n.oth-pp .rp-card::before{content:\"\";position:absolute;top:0;left:0;width:4px;height:100%;background:var(--r);transition:width .3s var(--ease)}\n.oth-pp .rp-card:hover::before{width:6px}\n.oth-pp .rp-card:hover{background:var(--k3);border-color:rgba(237,64,54,.3);transform:translateY(-3px);box-shadow:0 16px 40px rgba(0,0,0,.4)}\n.oth-pp .rp-icon{width:42px;height:42px;background:rgba(237,64,54,.08);border:1px solid rgba(237,64,54,.30);border-radius:8px;display:flex;align-items:center;justify-content:center;margin-bottom:14px;transition:all .3s var(--ease)}\n.oth-pp .rp-card:hover .rp-icon{background:rgba(237,64,54,.15);border-color:rgba(237,64,54,.5);transform:scale(1.1) rotate(-5deg)}\n.oth-pp .rp-icon svg{width:20px;height:20px;stroke:var(--r);fill:none;stroke-width:1.8;stroke-linecap:round;stroke-linejoin:round}\n.oth-pp .rp-tag{font-family:var(--m);font-size:9.5px;letter-spacing:.12em;color:var(--r);font-weight:700;margin-bottom:6px;text-transform:uppercase}\n.oth-pp .rp-card h4{font-family:var(--d);font-style:italic;font-size:18px;font-weight:600;color:var(--w);margin:0 0 10px;letter-spacing:-.005em;line-height:1.2}\n.oth-pp .rp-card p{font-size:12.5px;line-height:1.6;color:var(--w1);margin:0 0 14px;flex:1}\n.oth-pp .rp-card p strong{color:var(--w);font-weight:600}\n.oth-pp .rp-card p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n.oth-pp .rp-arrow{font-family:var(--m);font-size:11px;letter-spacing:.10em;color:var(--r);font-weight:700;text-transform:uppercase;display:inline-flex;align-items:center;gap:8px;transition:gap .3s var(--ease)}\n.oth-pp .rp-arrow::after{content:\"\u2192\";font-family:var(--d);font-style:italic;font-size:15px;transition:transform .3s var(--ease)}\n.oth-pp .rp-card:hover .rp-arrow::after{transform:translateX(4px)}\n\n\/* ============ FINAL CTA \u00b7 RED-DOMINANT (matches other pages \u00b7 gold only as second-layer accent) ============ *\/\n.oth-pp .cta-sec{background:radial-gradient(ellipse 1000px 700px at 50% 0%,rgba(237,64,54,.22),transparent 60%),radial-gradient(ellipse 800px 500px at 50% 100%,rgba(237,64,54,.06),transparent 60%),var(--k);padding:130px 0;text-align:center;position:relative;overflow:hidden;border-top:1px solid var(--line)}\n.oth-pp .cta-sec::before{content:\"\";position:absolute;inset:0;background-image:linear-gradient(rgba(255,255,255,.025) 1px,transparent 1px),linear-gradient(90deg,rgba(255,255,255,.025) 1px,transparent 1px);background-size:64px 64px;pointer-events:none;mask-image:radial-gradient(ellipse 1200px 700px at 50% 50%,black,transparent 75%);-webkit-mask-image:radial-gradient(ellipse 1200px 700px at 50% 50%,black,transparent 75%)}\n.oth-pp .cta-content{position:relative;z-index:2;max-width:920px;margin:0 auto;padding:0 32px}\n.oth-pp .cta-content h2{font-size:clamp(32px,4.8vw,56px);line-height:1.05;font-weight:700;letter-spacing:-.028em;color:var(--w);margin:0 auto 22px;max-width:24ch}\n.oth-pp .cta-content h2 em{font-family:var(--d);font-style:italic;font-weight:500;color:var(--r)}\n.oth-pp .cta-content p{font-size:16px;line-height:1.7;color:var(--w1);max-width:74ch;margin:0 auto 36px}\n.oth-pp .cta-content p strong{color:var(--w);font-weight:600}\n.oth-pp .cta-content p em{font-family:var(--d);font-style:italic;color:var(--r);font-weight:500}\n.oth-pp .cta-buttons{display:flex;gap:14px;justify-content:center;flex-wrap:wrap}\n.oth-pp .btn{display:inline-flex;align-items:center;gap:12px;padding:16px 28px;font-family:var(--s);font-size:13px;font-weight:600;letter-spacing:.06em;text-transform:uppercase;text-decoration:none;border-radius:4px;transition:all .35s var(--ease);cursor:pointer;border:2px solid;position:relative;overflow:hidden}\n.oth-pp .btn::after{content:\"\u2192\";font-family:var(--d);font-style:italic;font-size:17px;transition:transform .3s var(--ease)}\n.oth-pp .btn:hover::after{transform:translateX(5px)}\n.oth-pp .btn-primary{background:var(--r);color:var(--w) !important;border-color:var(--r)}\n.oth-pp .btn-primary:hover{background:var(--r1);border-color:var(--r1);transform:translateY(-3px);box-shadow:0 16px 40px rgba(237,64,54,.45)}\n.oth-pp .btn-outline{background:transparent;color:var(--w) !important;border-color:var(--w4)}\n.oth-pp .btn-outline:hover{background:var(--w);color:var(--k) !important;border-color:var(--w);transform:translateY(-3px)}\n.oth-pp .cta-note{margin-top:30px;font-family:var(--m);font-size:11px;letter-spacing:.14em;text-transform:uppercase;color:var(--w2);line-height:1.8}\n.oth-pp .cta-note b{color:var(--r);font-weight:700}\n.oth-pp .cta-note a{color:inherit;text-decoration:none;transition:color .2s}\n.oth-pp .cta-note a:hover{color:var(--w)}\n.oth-pp .cta-note .sep{color:var(--r)}\n\n.oth-pp .endline{padding:32px 0;text-align:center;font-family:var(--m);font-size:11px;font-weight:500;letter-spacing:.16em;text-transform:uppercase;color:var(--w2);background:var(--k);border-top:1px solid var(--line)}\n.oth-pp .endline .r{color:var(--r)}\n\n@media (max-width:900px){.oth-pp .rp-grid{grid-template-columns:1fr;gap:10px}}\n@media (max-width:600px){.oth-pp .cta-sec{padding:72px 0}.oth-pp .btn{justify-content:center;width:100%}.oth-pp .cta-buttons{flex-direction:column}}\n<\/style>\n\n<!-- ============ RELATED POLICIES ============ -->\n<section class=\"rp-sec\" id=\"related\">\n  <div class=\"wrap-narrow\">\n    <div class=\"sec-head\" data-reveal>\n      <div class=\"sec-num\">\u2605 Related Policies \u00b7 Six-Document Compliance Framework<\/div>\n      <h2>Related <em>policies.<\/em> Cross-linked compliance framework.<\/h2>\n      <p class=\"sec-lead\">This Privacy Policy operates as part of <strong>Othello&#8217;s six-document institutional compliance framework<\/strong>. The substantive cross-linked policies below collectively document the engagement-letter chain governance, NDA discipline, cookie framework, security framework, terms of service, and sitemap navigation. <em>For institutional procurement panels, the framework is the substantive document set<\/em>.<\/p>\n    <\/div>\n\n    <div class=\"rp-grid\" data-reveal-stagger>\n      <a href=\"\/nda-confidentiality\/\" class=\"rp-card\">\n        <div class=\"rp-icon\"><svg viewBox=\"0 0 24 24\"><rect x=\"3\" y=\"11\" width=\"18\" height=\"11\" rx=\"2\"\/><path d=\"M7 11V7a5 5 0 0 1 10 0v4\"\/><\/svg><\/div>\n        <div class=\"rp-tag\">\u2605 NDA<\/div>\n        <h4>NDA &amp; Confidentiality<\/h4>\n        <p>The <strong>NDA-from-first-email discipline<\/strong> documented substantively \u2014 first-contact NDA, engagement-letter chain NDA, partner-routed back-office NDA, privilege chain preservation, audit-trail consolidation.<\/p>\n        <span class=\"rp-arrow\">Open NDA &amp; Confidentiality<\/span>\n      <\/a>\n      <a href=\"\/data-security\/\" class=\"rp-card\">\n        <div class=\"rp-icon\"><svg viewBox=\"0 0 24 24\"><path d=\"M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z\"\/><path d=\"M9 12l2 2 4-4\"\/><\/svg><\/div>\n        <div class=\"rp-tag\">\u2605 DATA SECURITY<\/div>\n        <h4>Data Security<\/h4>\n        <p>The <strong>substantive technical and organisational measures framework<\/strong> \u2014 encryption, access control, no-consumer-LLM-endpoint commitment, audit-trail consolidation, incident response, breach notification framework.<\/p>\n        <span class=\"rp-arrow\">Open Data Security<\/span>\n      <\/a>\n      <a href=\"\/cookies\/\" class=\"rp-card\">\n        <div class=\"rp-icon\"><svg viewBox=\"0 0 24 24\"><circle cx=\"12\" cy=\"12\" r=\"10\"\/><circle cx=\"9\" cy=\"9\" r=\"1\"\/><circle cx=\"15\" cy=\"9\" r=\"1\"\/><circle cx=\"12\" cy=\"14\" r=\"1\"\/><circle cx=\"8\" cy=\"15\" r=\"1\"\/><circle cx=\"16\" cy=\"13\" r=\"1\"\/><\/svg><\/div>\n        <div class=\"rp-tag\">COOKIES<\/div>\n        <h4>Cookies Notice<\/h4>\n        <p>The <strong>substantive cookie framework<\/strong> \u2014 three category breakdown (strictly necessary \/ analytics \/ preference), retention periods, consent mechanisms, opt-out routing, third-party processors. <em>No advertising \u00b7 no tracking \u00b7 no fingerprinting.<\/em><\/p>\n        <span class=\"rp-arrow\">Open Cookies Notice<\/span>\n      <\/a>\n      <a href=\"\/terms-of-service\/\" class=\"rp-card\">\n        <div class=\"rp-icon\"><svg viewBox=\"0 0 24 24\"><path d=\"M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z\"\/><polyline points=\"14 2 14 8 20 8\"\/><line x1=\"16\" y1=\"13\" x2=\"8\" y2=\"13\"\/><line x1=\"16\" y1=\"17\" x2=\"8\" y2=\"17\"\/><\/svg><\/div>\n        <div class=\"rp-tag\">TERMS<\/div>\n        <h4>Terms of Service<\/h4>\n        <p>The <strong>institutional terms of service framework<\/strong> \u2014 engagement-letter incorporation, scope of services, liability allocation, governing law (Thai law primary \u00b7 jurisdictional carve-outs for European matters), dispute resolution framework.<\/p>\n        <span class=\"rp-arrow\">Open Terms of Service<\/span>\n      <\/a>\n      <a href=\"\/certifications\/\" class=\"rp-card\">\n        <div class=\"rp-icon\"><svg viewBox=\"0 0 24 24\"><circle cx=\"12\" cy=\"8\" r=\"6\"\/><path d=\"M15.5 13.5L17 21l-5-3-5 3 1.5-7.5\"\/><\/svg><\/div>\n        <div class=\"rp-tag\">CERTIFICATIONS<\/div>\n        <h4>Certifications &amp; standards<\/h4>\n        <p>The <strong>methodology-standards register<\/strong> \u2014 IFRS S1\/S2, GRI, AA1000AS, FTSE Russell, SET ESG Ratings, plus ISO standards held by the bench. <em>38 verifiable standards \u00b7 8 verifiable outcomes.<\/em><\/p>\n        <span class=\"rp-arrow\">Open Certifications<\/span>\n      <\/a>\n      <a href=\"\/sitemap\/\" class=\"rp-card\">\n        <div class=\"rp-icon\"><svg viewBox=\"0 0 24 24\"><polyline points=\"3 6 9 3 15 6 21 3 21 18 15 21 9 18 3 21\"\/><line x1=\"9\" y1=\"3\" x2=\"9\" y2=\"18\"\/><line x1=\"15\" y1=\"6\" x2=\"15\" y2=\"21\"\/><\/svg><\/div>\n        <div class=\"rp-tag\">SITEMAP<\/div>\n        <h4>Site map &amp; <em>navigation<\/em><\/h4>\n        <p>The <strong>full site navigation map<\/strong> \u2014 13 language pages (Thai-English in-house flagship \u00b7 2 in-house trilingual desks \u00b7 10 partner-routed languages), services, bench, process, contact, certifications, policies.<\/p>\n        <span class=\"rp-arrow\">Open Sitemap<\/span>\n      <\/a>\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ============ FINAL CTA ============ -->\n<section class=\"cta-sec\" id=\"cta\">\n  <div class=\"cta-content\">\n    <h2 data-reveal>Privacy queries.<br><em>NDA-disciplined \u00b7 Bangkok-direct.<\/em><\/h2>\n    <p data-reveal>Othello International handles <strong>privacy queries, data subject rights requests, and substantive engagement-letter privacy framework discussion directly from the Bangkok bench<\/strong>. <em>Response within 30 days under Thai PDPA s.30, within 1 month under EU GDPR Art.12(3)<\/em>, with extension permitted for complex requests. For institutional procurement-governance discussion of the engagement-letter chain privacy framework, the bench&#8217;s substantive responses are at engagement-tier with <strong>NDA-from-first-email discipline applied to substantive queries<\/strong>.<\/p>\n    <div class=\"cta-buttons\" data-reveal>\n      <a href=\"mailto:info@othelloshop.com?subject=Privacy%20%E2%80%94%20Query\" class=\"btn btn-primary\">Email Privacy Query<\/a>\n      <a href=\"\/contact\/\" class=\"btn btn-outline\">4 Engagement Pathways<\/a>\n    <\/div>\n    <div class=\"cta-note\" data-reveal>\n      <a href=\"tel:+6628592145\"><b>+66 02-859-2145<\/b><\/a> <span class=\"sep\">\u00b7<\/span> <a href=\"mailto:info@othelloshop.com\"><b>info@othelloshop.com<\/b><\/a><br>\n      Unit 12-03, Chartered Square <span class=\"sep\">\u00b7<\/span> 152 N Sathon Rd <span class=\"sep\">\u00b7<\/span> Si Lom <span class=\"sep\">\u00b7<\/span> Bangkok 10500\n    <\/div>\n  <\/div>\n<\/section>\n\n<!-- ============ ENDLINE ============ -->\n<div class=\"endline\">\n  Privacy Policy <span class=\"r\">\u00b7<\/span> v12.3 \u00b7 Effective 15 May 2026 <span class=\"r\">\u00b7<\/span> Thai PDPA Primary \u00b7 EU GDPR for European Matters \u00b7 Regional ASEAN PDPAs <span class=\"r\">\u00b7<\/span> NDA From First Email <span class=\"r\">\u00b7<\/span> No Consumer LLM Endpoints <span class=\"r\">\u00b7<\/span> Bangkok-Retained Audit-Trail <span class=\"r\">\u00b7<\/span> Bangkok Sathon CBD <span class=\"r\">\u2014<\/span> Othello International\n<\/div>\n\n<\/div>\n<!-- \/.oth-pp PAGE END -->\n\n<script>\n(function(){\n  if (typeof window === 'undefined' || typeof document === 'undefined') return;\n  var root = document.querySelector('.oth-pp');\n  if (!root) return;\n\n  var revealEls = root.querySelectorAll('[data-reveal], [data-reveal-stagger]');\n  if ('IntersectionObserver' in window && revealEls.length){\n    var io = new IntersectionObserver(function(entries){\n      entries.forEach(function(e){\n        if (e.isIntersecting){\n          e.target.classList.add('in');\n          io.unobserve(e.target);\n        }\n      });\n    }, { threshold: 0.10, rootMargin: '0px 0px -40px 0px' });\n    revealEls.forEach(function(el){ io.observe(el); });\n  } else {\n    revealEls.forEach(function(el){ el.classList.add('in'); });\n  }\n})();\n<\/script>\n\n<script type=\"application\/ld+json\">\n{\n  \"@context\": \"https:\/\/schema.org\",\n  \"@graph\": [\n    {\"@type\": \"PrivacyPolicy\", \"@id\": \"https:\/\/www.othellointernational.com\/privacy-policy\/#policy\", \"name\": \"Privacy Policy\", \"url\": \"https:\/\/www.othellointernational.com\/privacy-policy\/\", \"dateModified\": \"2026-05-15\", \"inLanguage\": \"en\", \"publisher\": {\"@type\": \"Organization\", \"name\": \"Othello International\", \"url\": \"https:\/\/www.othellointernational.com\/\", \"address\": {\"@type\": \"PostalAddress\", \"streetAddress\": \"Unit 12-03, Chartered Square, 152 North Sathon Road\", \"addressLocality\": \"Bang Rak\", \"addressRegion\": \"Bangkok\", \"postalCode\": \"10500\", \"addressCountry\": \"TH\"}, \"telephone\": \"+66-2-859-2145\", \"email\": \"info@othelloshop.com\"}, \"description\": \"Othello International Privacy Policy. Multi-jurisdiction data protection framework: Thai PDPA (Personal Data Protection Act B.E. 2562) primary as Bangkok-domiciled controller, EU GDPR (Regulation 2016\/679) for European-language engagements and EU-domiciled matters, regional ASEAN frameworks (Indonesia UU PDP Law No. 27 of 2022, Vietnam PDPD Decree 13\/2023, Singapore PDPA, Malaysia PDPA, Hong Kong PDPO, Japan APPI) as applicable. Eleven substantive sections covering controller identity, data categories, legal bases, retention periods, sharing recipients including partner-routed chain, international transfers, data subject rights, cookies, security commitments, children's privacy, changes and contact. Four operational privacy commitments anchor the engagement-tier posture: NDA-from-first-email, no consumer LLM endpoints, bench-direct sign-off, Bangkok-retained audit-trail consolidated as one file per engagement.\"},\n    {\"@type\": \"BreadcrumbList\", \"itemListElement\": [\n      {\"@type\": \"ListItem\", \"position\": 1, \"name\": \"Home\", \"item\": \"https:\/\/www.othellointernational.com\/\"},\n      {\"@type\": \"ListItem\", \"position\": 2, \"name\": \"Privacy Policy\", \"item\": \"https:\/\/www.othellointernational.com\/privacy-policy\/\"}\n    ]},\n    {\"@type\": \"Organization\", \"@id\": \"https:\/\/www.othellointernational.com\/#organization\", \"name\": \"Othello International\", \"url\": \"https:\/\/www.othellointernational.com\/\", \"address\": {\"@type\": \"PostalAddress\", \"streetAddress\": \"Unit 12-03, Chartered Square, 152 North Sathon Road\", \"addressLocality\": \"Bang Rak\", \"addressRegion\": \"Bangkok\", \"postalCode\": \"10500\", \"addressCountry\": \"TH\"}, \"telephone\": \"+66-2-859-2145\", \"email\": \"info@othelloshop.com\"}\n  ]\n}\n<\/script>\n\n\n","protected":false},"excerpt":{"rendered":"<p>PRIVACY POLICY \u00b7 THAI PDPA PRIMARY \u00b7 EU GDPR FOR EUROPEAN MATTERS \u00b7 REGIONAL PDPAs Last Updated \u00b7 15 May 2026 Othello \/ Privacy Policy \u2605 THAI PDPA \u00b7 EU GDPR \u00b7 ASEAN PDPAs \u00b7 \u2605 ENGAGEMENT-TIER DATA PROTECTION DISCIPLINE Privacy Policy.Institutional \u00b7 multi-jurisdiction \u00b7 NDA-disciplined. Effective:15 May 2026 Version:v12.3 Controller:Othello International Jurisdiction:Bangkok, Thailand This [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_yoast_wpseo_title":"Privacy Policy | Othello International","_yoast_wpseo_metadesc":"Privacy Policy: Learn how Othello protects your data, ensuring confidentiality and security in all translation services.","_yoast_wpseo_focuskw":"Privacy Policy","_yoast_wpseo_canonical":"","rank_math_title":"Privacy Policy | Othello International","rank_math_description":"Privacy Policy: Learn how Othello protects your data, ensuring confidentiality and security in all translation services.","rank_math_focus_keyword":"Privacy Policy","rank_math_canonical_url":"","_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_opengraph-title":"","_yoast_wpseo_opengraph-description":"","_yoast_wpseo_twitter-title":"","_yoast_wpseo_twitter-description":"","_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"footnotes":"","rank_math_robots":["index"]},"class_list":["post-11930","page","type-page","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.othellointernational.com\/th\/wp-json\/wp\/v2\/pages\/11930","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.othellointernational.com\/th\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.othellointernational.com\/th\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.othellointernational.com\/th\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.othellointernational.com\/th\/wp-json\/wp\/v2\/comments?post=11930"}],"version-history":[{"count":43,"href":"https:\/\/www.othellointernational.com\/th\/wp-json\/wp\/v2\/pages\/11930\/revisions"}],"predecessor-version":[{"id":32885,"href":"https:\/\/www.othellointernational.com\/th\/wp-json\/wp\/v2\/pages\/11930\/revisions\/32885"}],"wp:attachment":[{"href":"https:\/\/www.othellointernational.com\/th\/wp-json\/wp\/v2\/media?parent=11930"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}