Privacy Policy
Last Updated: 12 May 2025
This Privacy Policy explains how Suphan Tech Co., Ltd. ("Suphan Tech", "we", "us") collects, uses, and protects personal data in connection with our website at {{DOMAIN}} and our AI integration services. It is governed by the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand.
1. Personal Data We Collect
We collect personal data through our website contact form and through direct engagement with clients. This may include:
- Contact information: full name, email address, phone number (optional)
- Enquiry content: the message text you submit through our contact form
- Technical data: browser type, IP address, pages visited, collected via analytics cookies (only with your consent)
- Business data: information about your systems shared during service delivery
Legal basis: Contract performance (for service delivery), legitimate interest (for enquiry responses), and consent (for analytics).
Retention: Contact enquiries are retained for 24 months. Client service records are retained for 5 years in accordance with Thai commercial law requirements.
2. How We Use Your Personal Data
- Responding to enquiries submitted through our contact form
- Delivering assessment, connector build, and managed integration services
- Sending service-related communications (project updates, reports)
- Improving our website using aggregated analytics data (only where consent is given)
- Meeting legal and regulatory obligations under Thai law
We do not sell your personal data. We do not share it with third parties for marketing purposes.
3. Third-Party Services and Data Sharing
We may share limited personal data with the following categories of service providers to operate our website and deliver services:
- Analytics providers (e.g., Google Analytics): website usage data, only where analytics cookies are accepted
- Web hosting providers: necessary to operate our website and handle form submissions
- Professional advisors: legal and accounting services, under strict confidentiality obligations
All third parties are required to process data only for the stated purpose and in compliance with applicable data protection laws.
4. How We Protect Your Data
- HTTPS encryption on all website connections
- Access to personal data limited to staff who need it to perform their work
- Internal access controls reviewed periodically
- Data breach notification procedures in place — affected individuals and the PDPC notified within 72 hours where required under the PDPA
5. Cookies
We use essential cookies necessary for basic website functionality, and optional analytics and preference cookies that are only activated with your consent. You can manage your cookie preferences at any time through our Cookie Policy page.
6. Your Rights Under the PDPA
Under Thailand's Personal Data Protection Act B.E. 2562, you have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Rectification: request correction of inaccurate data
- Erasure: request deletion where data is no longer necessary
- Portability: request your data in a machine-readable format where technically feasible
- Objection: object to processing based on legitimate interest
- Withdraw consent: where processing is based on consent, withdraw at any time without affecting prior processing
To exercise any of these rights, contact us at privacy@{{DOMAIN}}. We will respond within 30 days. If you believe we have handled your data incorrectly, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).
7. Links to External Sites
Our website may link to external resources. We are not responsible for the privacy practices of third-party websites. We encourage you to read the privacy policies of any external sites you visit.
8. Children's Privacy
Our services are directed at business organisations and their representatives. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be noted at the top of this page with a revised "Last Updated" date. Continued use of our website after changes are posted constitutes acceptance of the revised policy.
10. Data Controller Contact
For privacy-related questions or to exercise your rights:
Suphan Tech Co., Ltd.
210 Rama IX Road, Huai Khwang, Bangkok 10310, Thailand