Privacy Policy
Last Updated: February 15, 2025
At Mesh-Connects, we get that talking about insurance means sharing personal information. And we don't take that lightly. This policy explains how we handle your data when you work with us on insurance needs analysis and selection.
We've written this in plain language because legal jargon helps no one. If something's unclear, reach out. We'd rather answer questions than have you wondering what we're doing with your information.
Thailand Context: This policy complies with Thailand's Personal Data Protection Act (PDPA) which came into full effect in 2022. We operate from our Songkhla office and follow Thai data protection standards while serving clients throughout Thailand.
What Information We Collect
To help you find the right insurance coverage, we need certain information. Here's what we typically collect and why:
Personal Identifiers
Your name, contact details, date of birth, and Thai ID number. We need this to get accurate quotes and set up policies in your name.
Financial Information
Income details, assets, and existing coverage. This helps us recommend insurance that fits your actual financial situation, not just what sounds good on paper.
Health Information
Medical history and current health status when relevant. Insurance companies require this for life and health policies. We only collect what's necessary for the specific coverage you're exploring.
Professional Details
Your occupation and employer information. Some insurance products have specific requirements or pricing based on what you do for a living.
How We Collect This Information
Most information comes directly from you during consultations, through forms on our website, or via email and phone conversations. Sometimes we'll verify details with third parties—like confirming existing coverage with your current insurer—but only with your permission.
How We Use Your Information
We use your data for specific purposes related to helping you with insurance:
- Needs Analysis: Understanding your situation so we can recommend appropriate coverage options
- Quote Generation: Submitting your information to insurance providers to get accurate pricing
- Policy Setup: Processing applications and establishing coverage when you decide to move forward
- Ongoing Service: Managing your policies, answering questions, and helping with claims when needed
- Communication: Sending policy updates, renewal notices, and relevant insurance information
- Legal Compliance: Meeting requirements under Thai insurance regulations and PDPA standards
We don't use your information for unrelated marketing. If you're a client and we think a new insurance product might benefit you, we might mention it. But we're not selling your data to other companies or bombarding you with promotions for things you didn't ask about.
Sharing Your Information
Insurance work requires sharing some of your information. Here's who sees what and why:
Insurance Providers
When we request quotes or submit applications, we share relevant information with insurance companies. They need this data to assess risk and provide accurate pricing. We only work with licensed insurers operating legally in Thailand.
Service Providers
Our CRM system, email service, and document storage platforms process your information. These companies are bound by strict confidentiality agreements and can only use your data for providing their specific services to us.
Legal Requirements
If Thai authorities request information as part of a legitimate legal process, we'll comply. This might happen in cases involving insurance fraud investigations or other regulatory matters. We'll notify you when legally permitted to do so.
Business Transfers
If Mesh-Connects were acquired or merged with another company, your information would transfer to the new entity. You'd be notified of any such change and how it affects your data rights.
What we don't do: We don't sell your information to data brokers, marketing companies, or anyone else. We don't share your data with unrelated businesses for their promotional purposes.
Your Rights Under Thai Law
Thailand's PDPA gives you specific rights over your personal data. Here's what you can do and how to do it:
- Access Your Data: Request a copy of what information we hold about you. We'll provide this within 30 days, free of charge for the first request.
- Correct Inaccuracies: If something's wrong in our records, let us know and we'll fix it. This is important for insurance purposes since errors can affect coverage.
- Request Deletion: Ask us to delete your information if you're no longer a client and we have no legal reason to keep it. Note that insurance regulations require us to maintain some records for specific periods.
- Restrict Processing: Limit how we use your data if you're disputing its accuracy or have other legitimate concerns.
- Data Portability: Get your information in a common electronic format that you can transfer to another service provider.
- Object to Processing: Opt out of specific uses of your data, particularly for marketing purposes.
- Withdraw Consent: Change your mind about data uses you previously agreed to. This doesn't affect anything that happened before you withdrew consent.
To exercise these rights, email help@mesh-connects.com or visit our Songkhla office. We'll need to verify your identity before processing requests involving your personal information.
How We Protect Your Information
Security matters in insurance work. Here's what we do to keep your data safe:
Technical Measures
- Encrypted data transmission using SSL/TLS protocols for all online communications
- Secure cloud storage with providers that maintain ISO 27001 certification
- Regular security updates and patches for all systems we use
- Firewall protection and intrusion detection systems
- Encrypted backups stored in separate secure locations
Organizational Measures
- Access controls limiting who can view sensitive information
- Regular staff training on data protection and confidentiality
- Background checks for employees handling personal data
- Clear procedures for secure document disposal
- Incident response plans for potential data breaches
Despite these measures, no system is completely impenetrable. If we experience a data breach affecting your information, we'll notify you and the Thai Personal Data Protection Committee within 72 hours as required by law.
How Long We Keep Your Data
We don't keep information longer than necessary, but insurance has specific retention requirements:
- Active Clients: We maintain your complete records while you have active policies with us plus the applicable statute of limitations period
- Prospective Clients: If you consulted with us but didn't purchase coverage, we keep basic records for two years in case you return
- Policy Documentation: Thai insurance regulations require maintaining policy records for at least five years after a policy ends
- Claims Records: Documentation related to insurance claims is kept for seven years as required by law
- Financial Records: Accounting and payment information is retained for ten years per Thai tax requirements
After these periods expire, we securely delete or anonymize your information. Anonymized data—where you can't be identified—might be kept longer for statistical analysis of insurance trends.
International Data Transfers
We primarily work with Thai insurance providers and keep data within Thailand. However, some situations involve international transfers:
Some of our technology providers host data in secure facilities outside Thailand—typically in Singapore or Japan. These countries have data protection standards recognized as adequate by Thai authorities. Any transfers to other countries use standard contractual clauses approved under the PDPA.
If you're applying for international insurance coverage or working with reinsurers, your information might go to companies abroad. We'll always inform you before making such transfers and ensure appropriate protections are in place.
Cookies and Website Technology
Our website uses basic cookies to function properly. Here's what's happening when you visit mesh-connects.com:
- Essential Cookies: These keep the website working—things like remembering you're logged into our client portal
- Analytics Cookies: We use these to understand how people use our site so we can improve it. This data is aggregated and doesn't identify you personally
- Preference Cookies: These remember your choices like language settings
We don't use advertising cookies or third-party tracking. You can control cookies through your browser settings, though some website features might not work if you disable essential cookies.
Children's Privacy
Our services aren't directed at children under 18. We don't knowingly collect information from minors without parental consent. If you're under 20 (the age of majority in Thailand) and want to discuss insurance, we'll need a parent or legal guardian involved in the process.
Changes to This Policy
Insurance regulations and data protection laws evolve. When we update this policy, we'll post the new version on our website and note the revision date at the top.
For significant changes—like expanding how we use your data—we'll notify active clients directly via email. Continuing to work with us after changes take effect means you accept the updated terms. If you don't agree with changes, you can request that we stop processing your data, though this might affect our ability to service your policies.
Questions and Complaints
If something about how we handle your data concerns you, start by talking to us. Most issues get resolved through direct conversation.
For formal complaints about privacy practices, you can contact Thailand's Personal Data Protection Committee. But honestly, we'd rather address concerns directly before they reach that point.
We review our data practices regularly and take feedback seriously. If you think we could do something better, tell us.
Contact Our Privacy Team
Questions about this policy or how we handle your information? Get in touch. We're here during business hours and typically respond within one business day.
Songkhla 90110, Thailand