Legal
Privacy Policy
Data Architect takes the protection of your personal data seriously. This policy explains how we collect, use and look after the information we receive through this website.
Draft for review: the structure and technical facts on this page reflect how the website works. All legal wording must be reviewed and approved by legal counsel before launch. [TODO: legally approved text]
1. Data controller
Data Architect Co., Ltd. [TODO: company registration number], 942/72 Charn Issara Tower 1, Rama IV Rd, Suriya Wong, Bang Rak, Bangkok 10500, Thailand. Email: info@dataarchitect.co.th
2. Data we collect
Information you enter in the contact form
Your full name, organization, email address, phone number, topic of interest, the message you write to us, and your consent.
Technical data
When you visit the website, our hosting provider processes technical data such as your IP address and browser details in order to deliver pages and protect against attacks. We use Cloudflare Web Analytics, which does not use cookies to count visits. [TODO: confirm with legal counsel]
3. Purposes and legal basis
- To reply to your enquiry and arrange consultations or demos
- To prevent spam and misuse of the contact form
- To keep the website secure and improve how it works
[TODO: legal basis for each purpose, e.g. consent or legitimate interest]
4. Disclosure and data processors
We do not sell your personal data. It may be processed by service providers that the website needs in order to work:
- Cloudflare — website hosting, form handling and spam protection (Turnstile)
- Resend — delivering form messages to our team's inbox
5. International transfers
[TODO: the providers above may process data outside Thailand; describe safeguards under PDPA sections 28–29]
6. How long we keep data
[TODO: retention period for form messages and emails, and how they are deleted]
7. Your rights
Under the Personal Data Protection Act B.E. 2562 (2019), you have the right to:
- access and obtain a copy of your personal data
- have inaccurate or outdated data corrected
- have your data deleted, destroyed or anonymized
- restrict the use of your data
- object to the collection, use or disclosure of your data
- data portability
- withdraw your consent at any time
- lodge a complaint with the Personal Data Protection Committee
To exercise these rights, email info@dataarchitect.co.th. [TODO: dedicated channel and response time]
8. Security
Every page of this website is served over HTTPS, the website has no database, and form messages are delivered directly to our team's email. [TODO: internal measures, e.g. restricted access to the inbox]
9. Cookies
This website does not set marketing or tracking cookies. Cloudflare's spam protection (Turnstile) on the contact page may use cookies or similar technologies under Cloudflare's own policies. [TODO: verify cookies after deployment]
10. Changes to this policy
We may update this policy from time to time. The latest effective date is shown at the top of this page.
11. Contact us
Questions about this policy? Email info@dataarchitect.co.th. [TODO: DPO contact, if any]