Privacy Policy

1. Data We Collect

When you use our website or contact us, we may collect the following personal data:

• Full name (from contact form)
• Email address (from contact form)
• Phone number (optional, from contact form)
• Message content you provide
• Technical data: IP address, browser type, pages visited, time on site (via analytics cookies, if consented)
• Cookie consent preferences stored in localStorage

Legal Basis for Processing

• Consent: Analytics and marketing cookies, marketing communications
• Legitimate interest: Responding to enquiries, improving our service
• Contract: Delivering services you have engaged us to provide
• Legal obligation: Where required by Thai law

Retention Periods

• Contact form submissions: up to 2 years from last contact
• Client engagement records: up to 5 years for legal and contractual purposes
• Analytics data: as per third-party provider's retention policy (typically 14–26 months)

2. How We Use Your Data

• To respond to your enquiries and provide the services you have requested
• To send service-related communications (project updates, monthly summaries for Caretaking clients)
• To improve our website and service offering using aggregated, anonymised analytics data
• To comply with legal and regulatory obligations under Thai law
• To send occasional service updates or relevant information, where you have consented

Data Sharing

We do not sell personal data. We may share data with third-party service providers who assist us in operating the website (hosting, analytics), under data processing agreements that bind them to appropriate protection standards. We do not share data with AI tool vendors or any other commercial partners without your explicit agreement.

3. Data Protection Measures

• All data in transit is protected via HTTPS/TLS encryption
• Access to personal data is restricted to team members who require it for their work
• Internal access controls and regular review of data handling practices
• In the event of a data breach that affects your rights, we will notify you within 72 hours of becoming aware of it, in accordance with PDPA requirements
• No personal data is processed by AI tools without explicit client understanding and agreement, as described in our service documentation

4. Cookies

Our website uses cookies to function correctly and, with your consent, to understand how it is used. Essential cookies cannot be disabled as they are required for basic site operation. Optional cookies (analytics, marketing, preferences) are only set if you accept them via the cookie banner.

For full details, including how to manage your preferences, see our Cookie Policy.

5. Your Rights Under Thailand's PDPA

Under the Personal Data Protection Act B.E. 2562, you have the following rights with respect to your personal data:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your data where there is no compelling reason for continued processing
• Right to data portability: Receive your data in a structured, machine-readable format where applicable
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Withdraw any previously given consent at any time, without affecting the lawfulness of processing before withdrawal
• Right to lodge a complaint: File a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have been infringed

To exercise any of these rights, write to us at [email protected]. We will respond within 30 days.

6. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.

7. Children's Privacy

Our services are directed at businesses and are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. Material changes will be notified via a notice on our website. The date at the top of this page shows when the policy was last revised. Continued use of our website after a change constitutes acceptance of the revised policy.

9. Contact — Data Enquiries

Bua Digital is the data controller for personal data collected through this website. For data-related questions, requests, or complaints: