Privacy Policy

Introduction

noppaoap ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our consulting services, or otherwise interact with us.

We comply with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA) and maintain industry-standard data protection practices. If you have questions about this policy, please contact us at [email protected].

Data Controller Information

Entity: noppaoap

Address: 28/1 Kaeo Nawarat Road, Wat Ket, Mueang Chiang Mai, Chiang Mai 50000, Thailand

Email: [email protected]

Phone: +66 53 248 715

Information We Collect

Personal Data You Provide

When you contact us, request consulting services, or otherwise engage with us, we may collect:

• Name and contact information (email address, phone number)
• Company name and position/role
• Message content or inquiry details
• Communication preferences
• Any other information you choose to provide

Automatically Collected Data

When you visit our website, we may automatically collect:

• IP address and general location information
• Browser type and version
• Device information
• Pages visited and time spent on pages
• Referring website information

Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information about our cookie practices, please see our Cookie Policy.

Legal Basis for Processing

Under the PDPA, we process your personal data based on the following legal grounds:

• Consent: When you submit contact forms or agree to receive communications
• Contract Performance: To provide consulting services you have requested
• Legitimate Interest: For business development, website improvement, and security purposes
• Legal Obligation: When required by Thai law or regulatory requirements

How We Use Your Information

We use collected information for the following purposes:

• Responding to your inquiries and providing requested information
• Delivering consulting services and managing client relationships
• Improving our website and user experience
• Sending service updates, newsletters, or marketing communications (with your consent)
• Analyzing website usage and performance
• Complying with legal and regulatory obligations
• Protecting our rights and preventing fraud or security issues

Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

Service Providers

We work with trusted third-party service providers who assist us with:

• Website hosting and infrastructure services
• Email communication platforms
• Analytics and performance monitoring
• Customer relationship management systems

These service providers are contractually obligated to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose your information when required by law, court order, or government regulation, or when necessary to protect our legal rights or the safety of others.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Secure server infrastructure with regular security updates
• Access controls limiting data access to authorized personnel only
• Regular security audits and vulnerability assessments
• Employee training on data protection and security practices

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Retention periods vary based on data type:

• Contact Form Submissions: 2 years from last contact or until you request deletion
• Client Engagement Data: Duration of engagement plus 5 years for business records
• Marketing Communications: Until you unsubscribe or request removal
• Website Analytics Data: 26 months (Google Analytics default)

Your Rights Under PDPA

As a data subject under Thailand's PDPA, you have the following rights:

• Right to Access: Request confirmation of whether we process your data and obtain a copy
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain conditions
• Right to Data Portability: Request your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Restrict Processing: Request limitation of processing under certain circumstances
• Right to Withdraw Consent: Withdraw consent for processing at any time
• Right to Lodge Complaint: File a complaint with the Personal Data Protection Committee

To exercise these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request.

International Data Transfers

We primarily store and process data within Thailand. However, some service providers may process data in other countries. When transferring data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by data protection authorities
• Transfers to countries with adequate data protection recognized by Thai authorities
• Certification schemes demonstrating appropriate safeguards

Children's Privacy

Our services are intended for business audiences and we do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have collected data from a minor without parental consent, we will take steps to delete that information promptly.

Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review their privacy policies before providing any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. We will post the updated policy on this page with a revised "Last Updated" date. For material changes, we may provide additional notice such as email notification to registered users.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: