Privacy Policy

1. Data We Collect

When you use our website or contact us about our services, we may collect the following types of personal data:

• Contact information: name, email address, phone number — collected when you submit our enquiry form.
• Communication records: the content of messages you send us by email or through the contact form.
• Technical data: IP address, browser type, and pages visited — collected automatically by analytics tools when you use our website.
• Cookie data: your cookie preferences — stored in your browser's local storage.

We do not collect sensitive personal data (such as financial information, health data, or identification numbers) through our website. Data collected as part of service delivery is handled under a separate client agreement.

Legal Basis for Processing

• Consent: for analytics cookies and marketing communications, where you have opted in.
• Legitimate interest: for responding to enquiries and improving our website.
• Contractual necessity: for data collected during the delivery of our services to clients.

Retention Periods

• Enquiry form data: retained for 24 months from last contact, then deleted.
• Client service data: retained for 36 months from project completion, then deleted or returned.
• Analytics data: retained for 14 months in aggregated form.
• Cookie preference records: held in your browser until you clear them.

2. How We Use Your Data

We use the personal data we collect for the following purposes:

• Responding to enquiries submitted through our contact form.
• Delivering the services you have engaged us for (assessment, integration, maintenance).
• Sending updates relevant to your engagement — project status, documentation, review schedules.
• Improving our website based on aggregated usage data.
• Complying with legal obligations, including Thai tax and company law requirements.

We do not sell your personal data to third parties. We do not use your data for automated profiling or decision-making.

Data Sharing

We may share data with the following categories of third party, only to the extent necessary:

• Analytics providers: we use privacy-configured analytics tools to understand website usage in aggregate. No personal identifiers are shared.
• Email hosting providers: your messages are processed by our email service provider under a data processing agreement.
• Legal or regulatory authorities: where required by Thai law or a valid legal order.

3. Data Protection Measures

• Our website uses HTTPS encryption for all data in transit.
• Access to personal data held internally is restricted to staff with a direct operational need.
• We review our data handling practices at least annually.
• In the event of a data breach affecting your personal data, we will notify affected individuals and the relevant Thai authorities within the timeframes required by PDPA.
• We do not transfer personal data outside Thailand without ensuring adequate protections are in place under applicable law.

4. Cookies

Our website uses cookies to support basic functionality and, with your consent, to understand how the site is used. We use the following categories:

• Essential cookies: required for the site to work correctly. Always active.
• Analytics cookies: help us understand pages visited and how long users stay. Only active with your consent.
• Preference cookies: remember settings you have chosen. Only active with your consent.

You can manage your cookie preferences at any time on our Cookie Policy page.

5. Your Rights Under PDPA

As a data subject under Thailand's Personal Data Protection Act, you have the following rights:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: ask us to correct inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data where we have no lawful reason to continue holding it.
• Right to data portability: receive your data in a structured, commonly used format where technically possible.
• Right to object: object to processing carried out on the basis of legitimate interest.
• Right to withdraw consent: withdraw consent at any time for processing based on consent, without affecting processing carried out before withdrawal.
• Right to lodge a complaint: you may lodge a complaint with the Personal Data Protection Committee of Thailand if you believe your rights have been violated.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

6. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies before providing any personal data.

7. Children's Privacy

Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website after changes constitutes acceptance of the updated policy. For material changes, we will make reasonable efforts to notify active clients directly.

9. Contact Us

For any questions about this policy or to exercise your rights: