1. Personal data we collect
We only collect the personal data needed to respond to inquiries, deliver services, and improve the website. We do not knowingly collect sensitive data (such as health, religion, or biometric data) and we ask you not to submit it through any form.
- Contact data you submit voluntarily via our Tally form: name, email, company, budget range, package direction, and the message you choose to write.
- Booking data you submit via Cal.com when you schedule a diagnostic call: name, email, and the meeting time you select.
- Analytics data collected automatically: pages viewed, approximate region, device type, browser, and an anonymous visitor identifier. We use PostHog for product analytics.
- Error and performance data collected automatically when something breaks: URL, browser, and a stack trace. We use Sentry for error monitoring.
- Cookie consent choice recorded on your device so we do not re-ask on every page.
2. Why we collect it
We process personal data only for specific, limited purposes:
- To respond to your inquiry and propose a suitable package or next step.
- To schedule and hold the diagnostic call you requested.
- To detect, diagnose, and fix bugs and performance issues.
- To understand, in aggregate, which pages and packages are useful, so we can improve the site.
- To keep a basic record of past inquiries in case you contact us again.
3. Legal basis (PDPA)
Under the Thai PDPA, we rely on the following legal bases:
- Consent — when you submit an inquiry form or accept optional analytics cookies.
- Contractual necessity — when we process data required to deliver a service you have engaged us for.
- Legitimate interests — for low-risk analytics, security, and fraud prevention that do not override your rights.
- Legal obligation — where Thai law requires us to keep certain records.
4. Third parties we use
We do not sell personal data. We share it only with the providers below, each of which processes data under its own privacy policy. We recommend reviewing their policies.
- Tally.so — hosts our contact form and stores submissions. https://tally.so/privacy-policy
- Cal.com — powers the optional diagnostic call booking. https://cal.com/privacy
- PostHog — product analytics on this website. https://posthog.com/privacy
- Sentry — error monitoring. https://sentry.io/privacy/
- Vercel — hosting and CDN for this website. https://vercel.com/legal/privacy-policy
- Your email provider — receives the owner notification we forward from Tally when a new inquiry arrives.
5. Cookies
We use a small number of cookies. Strictly necessary cookies (such as your consent choice) are set automatically. Optional analytics cookies are only set after you accept them in the cookie banner.
- Strictly necessary — your cookie consent decision.
- Analytics (optional) — anonymous visitor identifier used by PostHog.
- We do not use advertising or cross-site tracking cookies.
6. Data retention
We keep inquiry data for as long as needed to respond and follow up, and then for a reasonable additional period so we can recognize you if you reach out again. Booking data is retained by Cal.com per its policy. Analytics data is retained in aggregated form for as long as PostHog is configured to keep it.
You can request earlier deletion at any time using the contact details below.
7. Security
We use HTTPS for all traffic, restrict access to inquiry data, and rely on vetted providers with strong security practices. No method of transmission or storage is fully secure, but we work to reduce risk to a reasonable level.
8. Cross-border data transfer
Some of the providers listed above process data outside Thailand. By submitting an inquiry or accepting optional analytics, you consent to that transfer for the purposes described in this policy.
9. Your rights under PDPA
You have the following rights regarding your personal data:
- Right to be informed about how your data is used (this policy).
- Right to access the personal data we hold about you.
- Right to correct inaccurate data.
- Right to delete your data, subject to legal retention obligations.
- Right to restrict or object to processing.
- Right to withdraw consent at any time (without affecting processing already done).
- Right to data portability.
- Right to lodge a complaint with the Personal Data Protection Committee (PDPC) Office of Thailand.
10. Children
This website is intended for business clients and is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has submitted data to us, please contact us and we will delete it.
11. Changes to this policy
We may update this policy as our services or the law evolves. The "last updated" date above will always reflect the latest revision. Material changes will be highlighted on the website.