Privacy Policy
Last Updated: 12 May 2025 · Tawan Tech Co., Ltd.
Tawan Tech Co., Ltd. ("Tawan Tech", "we", "us", or "our") is committed to handling the personal data of anyone who uses our website or engages our services with care and transparency. This policy explains what data we collect, how we use it, how long we keep it, and what your rights are.
This policy covers data collected through our website at {{DOMAIN}}, through our contact form, and through the delivery of our AI integration services. It is governed by the Personal Data Protection Act B.E. 2562 (PDPA), which came into full effect in Thailand in June 2022.
If you have questions about this policy or about how we handle your data, contact us at privacy@{{DOMAIN}}.
1. Data We Collect
We collect personal data in the following ways:
- Contact form submissions: Name, email address, phone number (optional), and any message content you include. This is submitted voluntarily when you reach out to us.
- Service delivery: During client engagements, we may access or receive business data necessary to carry out the agreed scope of work. The specific data is documented in writing before each engagement begins.
- Website analytics: We may use analytics tools that collect anonymised data about how visitors use our website, including pages visited and time spent. No personally identifiable information is included in these analytics.
- Cookies: Our website uses cookies for basic functionality and, with your consent, for analytics. See our Cookie Policy for details.
Legal Basis for Processing
- Consent: For cookies that are not essential, and for any marketing communications, we rely on your explicit consent.
- Contract performance: For data processed during a client engagement that is necessary to deliver the agreed service.
- Legitimate interest: For responding to enquiries submitted via our contact form.
Retention Periods
- Contact form data is retained for up to 24 months from the date of submission, or until you request deletion.
- Client engagement data is retained for the duration of the engagement plus 12 months, unless a longer period is required by law or agreed in writing.
- Website analytics data is retained in anonymised form and is not subject to individual deletion requests.
2. How We Use Your Data
- To respond to enquiries submitted through our contact form
- To deliver AI integration services as agreed with clients
- To maintain the client relationship and provide ongoing support
- To understand how our website is used and improve it over time
- To comply with legal obligations applicable in Thailand
We do not sell personal data to third parties. We do not use personal data for automated decision-making that has legal or similarly significant effects on individuals.
If you have submitted your details and wish to receive information about our services, we may send occasional updates by email. You can opt out at any time by contacting privacy@{{DOMAIN}}.
3. How We Protect Your Data
- Our website is served over HTTPS. Data in transit is encrypted.
- Access to client data within our team is limited to those who require it for the specific engagement.
- We document what data we access during each engagement and why, before we begin.
- In the event of a data breach that is likely to affect your rights or freedoms, we will notify you without undue delay.
- We do not retain client data beyond the periods stated in this policy unless required by law or agreed in writing.
4. Cookies
Our website uses cookies for basic functionality (essential cookies, always active) and, with your consent, for analytics purposes. You can manage your cookie preferences at any time through our Cookie Policy page.
Withdrawing consent for non-essential cookies will not affect your ability to use the website.
5. Your Rights
Under the Thailand PDPA, you have the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may ask us to correct inaccurate data.
- Right to erasure: You may ask us to delete your personal data where we have no lawful basis to continue holding it.
- Right to data portability: Where data was provided by you and processed on the basis of consent or contract, you may request it in a commonly used electronic format.
- Right to object: You may object to processing based on legitimate interest.
- Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, contact privacy@{{DOMAIN}}. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.
6. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and we encourage you to read their privacy policies separately.
7. Children's Privacy
Our services are directed at businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have received data from a minor, contact us immediately at privacy@{{DOMAIN}}.
8. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top. If we make significant changes, we will take reasonable steps to inform active clients by email. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.
9. Contact
Data Controller: Tawan Tech Co., Ltd.