Privacy Policy

Your privacy is important to us. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you visit our website or interact with our services. By using our website, you agree to the practices described in this policy.

Last updated: 10th July 2026 

Century R Co., Ltd. (“Century R”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of visitors to our website at https://centuryr.com (the “Website”), as well as our investors, prospective investors, and business partners.

This Privacy Policy explains how we collect, use, disclose, and protect your personal data, and describes your rights in relation to that data. It has been prepared in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and, where applicable to individuals in the European Economic Area or United Kingdom, the General Data Protection Regulation (“GDPR”).

By using this Website, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

Century R is a private investment firm that invests proprietary capital in private equity, real estate, and alternative investments, and provides advisory services to multi-family offices.

For the purposes of applicable data protection law, Century R Co., Ltd. is the data controller of the personal data described in this Policy.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Information you provide to us directly

  • Identity and contact details: name, title, email address, telephone number, company or family office name, and country of residence, submitted through our contact or enquiry forms, by email, or in the course of business dealings.
  • Investor information: where you are an investor or prospective investor, we may collect additional information required for onboarding, account administration, and legal compliance, including identification documents, proof of address, tax identification details, bank account details, source-of-funds information, and investment preferences.
  • Investor portal credentials: username, password, and login activity associated with the Investor Login area of the Website.
  • Correspondence: records of your communications with us, including meeting notes and email exchanges.

b) Information collected automatically

  • Technical data: IP address, browser type and version, operating system, device type, and screen resolution.
  • Usage data: pages visited, time spent on pages, referring website, and navigation paths, collected through cookies and similar technologies (see Section 7).

c) Information from third parties

  • We may receive personal data from publicly available sources, professional intermediaries, referral partners, or third-party service providers used for identity verification, sanctions screening, and anti-money laundering (“AML”) checks.

We do not knowingly collect personal data from individuals under the age of 20 (the age of majority in Thailand) without appropriate consent. This Website is not directed at minors.

3. How We Use Your Personal Data

We collect and use personal data for the following purposes and on the following legal bases:

PurposeLegal Basis
Responding to enquiries submitted via the Website or by emailLegitimate interests; steps prior to entering into a contract
Investor onboarding, account administration, and management of the investor relationshipPerformance of a contract; legal obligation
Identity verification, KYC, AML, and sanctions screeningLegal obligation
Providing access to and securing the Investor Login portalPerformance of a contract; legitimate interests
Sending updates, newsletters, event invitations, and information about our investment offeringsConsent; legitimate interests (existing investors)
Operating, maintaining, securing, and improving the WebsiteLegitimate interests
Analytics and measurement of Website performanceConsent (where required); legitimate interests
Complying with legal, regulatory, tax, and accounting obligationsLegal obligation
Establishing, exercising, or defending legal claimsLegitimate interests; legal claims

Where we rely on consent, you may withdraw it at any time by contacting us using the details in Section 1 or, for marketing emails, by using the unsubscribe link in any message. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

4. Disclosure of Your Personal Data

We do not sell your personal data. We may share personal data with:

  • Service providers who support the operation of our business and Website, such as website hosting providers, IT support, email service providers, analytics providers, and customer relationship management platforms, in each case under appropriate confidentiality and data protection obligations.
  • Investment partners and fund administrators, including third-party fund managers and product partners (for example, in connection with our partnered offerings such as fine wine investment and global student accommodation funds), where necessary to administer your investment.
  • Professional advisers, including lawyers, auditors, accountants, and tax advisers.
  • Banks and payment institutions, in connection with subscriptions, distributions, and other investment transactions.
  • Regulators, government authorities, courts, and law enforcement, where disclosure is required by law or reasonably necessary to comply with legal or regulatory obligations.
  • Successors in interest, in connection with a merger, acquisition, restructuring, or sale of all or part of our business, subject to appropriate safeguards.

5. International Transfers

Given the international nature of our business and investments, your personal data may be transferred to and processed in countries outside Thailand (or outside your country of residence), including jurisdictions that may not provide the same level of data protection as your home jurisdiction.

Where we transfer personal data internationally, we take steps to ensure it receives an adequate level of protection, including transferring to jurisdictions recognized as providing adequate protection, putting in place appropriate contractual safeguards (such as standard contractual clauses), or relying on other lawful transfer mechanisms permitted under the PDPA or GDPR, as applicable.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, or reporting requirements.

As a general guide:

  • Investor records are retained for the duration of the investment relationship and for a period of up to ten (10) years thereafter, or such longer period as required by applicable AML and financial regulations.
  • Enquiry and correspondence records are typically retained for up to two (2) years after our last interaction, unless a business relationship is established.
  • Website analytics data is retained in accordance with the retention settings of our analytics providers.

When personal data is no longer required, we securely delete or anonymize it.

7. Cookies and Similar Technologies

Our Website uses cookies and similar technologies to enable core functionality, remember your preferences, maintain secure sessions in the Investor Login area, and understand how visitors use the Website.

The types of cookies we use include:

  • Strictly necessary cookies — required for the Website and Investor Login portal to function and cannot be switched off in our systems.
  • Analytics cookies — help us understand how visitors interact with the Website (e.g., pages visited, time on site) so we can improve it.
  • Functionality cookies — remember choices you make, such as language preferences.

You can control and delete cookies through your browser settings. Please note that blocking strictly necessary cookies may affect the functionality of the Website, including your ability to access the Investor Login portal.

[If a separate Cookies Policy or consent banner is used, link to it here.]

8. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. These measures include encrypted connections (HTTPS/SSL), access controls on the Investor Login portal, restrictions on internal access to personal data on a need-to-know basis, and vendor due diligence.

However, no method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your Investor Login credentials confidential and should notify us immediately if you suspect any unauthorized access to your account.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data:

  • Access — to request a copy of the personal data we hold about you.
  • Rectification — to request correction of inaccurate or incomplete data.
  • Erasure — to request deletion of your personal data in certain circumstances.
  • Restriction — to request that we restrict processing in certain circumstances.
  • Objection — to object to processing based on legitimate interests, and to object at any time to direct marketing.
  • Data portability — to request your data in a structured, commonly used, machine-readable format.
  • Withdrawal of consent — where processing is based on consent.
  • Complaint — to lodge a complaint with the relevant supervisory authority. In Thailand, this is the Personal Data Protection Committee (PDPC). If you are located in the EEA or UK, you may complain to your local data protection authority.

To exercise any of these rights, please contact us using the details in Section 1. We may need to verify your identity before responding, and we will respond within the timeframes required by applicable law. Please note that some rights are subject to exceptions — for example, we may be required to retain certain investor records to comply with AML and other regulatory obligations even after a deletion request.

10. Third-Party Websites

The Website may contain links to third-party websites, including the websites of our investment partners. This Privacy Policy applies only to our Website. We are not responsible for the privacy practices of third-party websites, and we encourage you to review their privacy policies before providing any personal data to them.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. Where changes are material, we will take reasonable steps to bring them to your attention. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise your rights, please contact:

Data Protection Contact

Address: Century R Co., Ltd.
127 Gaysorn 2, 24 th Floor,Ratchadamri Road, Lumpini,Pathumwan, Bangkok 10330
Email: info@centuryr.com
Phone: +662 254 2888