PDPA
Privacy policy
How we collect, use and protect personal data of visitors and customers.
Updated · Plainflow Co., Ltd. (sample)
1.What we collect
Name, work email, company, phone and messages you send through forms, plus anonymous website usage data. For customers, we process workspace data on the customer's instructions as a data processor.
2.Why, and on what legal basis
To answer your request (pre-contract steps), to deliver the service (contract), and to send news only with your consent.
3.Sharing
We never sell personal data. We share it only with the sub-processors listed on our security page.
4.Retention
Contact data is kept up to 24 months after last contact; customer data is deleted within 30 days of cancellation.
5.Your rights
Access, correct, delete, port, object or withdraw consent at [DPO email]; you may also complain to Thailand's PDPC.
6.Controller and contact
[Company name], [address]. Data protection officer: [name, email].